Aller au contenu
  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Sujet planté] Infection PC : Bug et Ralentissement


momodu26

Messages recommandés

Bonjour,

Suite à une demande sur le forum de "demande de solution pour optimiser mon ordinateur" je me dirige vers ce forum car il semblerai que mon PC soit infecté. Je vous joint donc on 1ère message, ainsi que le lien de l'analyse ZHPdiag

Merci pour vos réponses

 

Lien ZHPDiag : Lien CJoint.com AJvo3NhaoA6

 

1ère message avec l'analyse HiJackThis :

 

Bonjour,

Je vous écris car cela fait quelques jours que mon ordinateur bug pas mal. Il y souvent des ralentissement important et j'aimerais savoir ce qu'il se passe.

Après avoir regardé quelques sites pour trouver des solutions, j'ai effectué un nettoyage avec Ccleaner et une detection de malwares avec "Malwarebytes' Anti-Malware" et mon ordinateur était effectivement bien infecté (100 malwares detecté). Mais cela n'a pas résolu complétement mon problème de bug et de ralentissement. J'aimerai donc savoir ce qu'il faut que je fasse. Je suis plûtot novice en matière d'informatique donc je ne veux pas faire de connerie :) Merci beaucoup

Voici mon analyse hijackthis :

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:14:26, on 18/10/2011

Platform: Unknown Windows (WinNT 6.01.3505 SP1)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

 

Running processes:

C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe

C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe

C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe

C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe

C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe

C:\Program Files\Alwil Software\Avast5\AvastUI.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe

C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe

c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe

C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = duxet.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HP | MSN

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"

O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

O4 - HKLM\..\Run: [updatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"

O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe

O4 - HKLM\..\Run: [searchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"

O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [Advanced SystemCare 4] "C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe"

O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O13 - Gopher Prefix:

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~1\GO36F4~1.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe

O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

 

--

End of file - 13360 bytes

Modifié par momodu26
Lien vers le commentaire
Partager sur d’autres sites

Bonsoir

 

Fait ceci.

 

* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

M2 - MFEP: prefs.js [LAURIANE - 0eiacw2h.default\@FissaPlugin] [] Fissa v1.0 (.Secure Digital Services.)

O4 - HKLM\..\Wow6432Node\Run: [HPCam_Menu] Clé orpheline

O4 - HKLM\..\Wow6432Node\Run: [updatePRCShortCut] Clé orpheline

[HKCU\Software\AppDataLow\Software\ShopperReports3]

[HKCU\Software\FissaSearch]

[HKCU\Software\OfferBox]

[HKLM\Software\FREEzeFrog]

[HKLM\Software\OfferBox]

O43 - CFD: 28/05/2011 - 15:32:16 - [188] ----D- C:\Users\LAURIANE\AppData\Roaming\OfferBox

O43 - CFD: 22/07/2011 - 22:09:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{011CBFED-3752-4824-B834-2A381E1D152F} =>

O43 - CFD: 19/09/2011 - 15:37:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{01F06593-BC16-491F-AC03-EDCB457BF654} =>

O43 - CFD: 16/05/2011 - 19:08:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{02246E71-0AD5-4E1C-A135-91318C8E3B54} =>

O43 - CFD: 25/05/2011 - 13:32:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{0240751A-C332-4FD1-9849-1827B053F334} =>

O43 - CFD: 03/10/2011 - 00:08:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{034D1A91-69B5-4A2B-95FC-4E62AF40C45C} =>

O43 - CFD: 06/04/2011 - 22:58:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{06D5C5E7-32DB-44D8-A15A-241980D3D7DC} =>

O43 - CFD: 15/09/2011 - 23:30:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{08383216-A2FC-4B39-948D-8DAFA7EC97E3} =>

O43 - CFD: 12/05/2011 - 09:57:14 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{0CE1ED87-7611-481C-97B4-5EB107971F08} =>

O43 - CFD: 15/10/2011 - 12:48:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{0E85D462-4DB5-468A-A965-B214C393321C} =>

O43 - CFD: 31/07/2011 - 22:42:20 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{11B84EF6-C375-48B7-8283-6E380AF020AE} =>

O43 - CFD: 12/10/2011 - 12:08:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{127C3CAE-202F-41DB-98E5-04921BC3F56B} =>

O43 - CFD: 28/07/2011 - 08:29:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{166AF781-5D30-4D30-860E-0BAE06ABFF11} =>

O43 - CFD: 19/09/2011 - 15:36:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1708FCF0-FE8B-458B-A140-1EF9AA90DA3F} =>

O43 - CFD: 25/09/2011 - 14:14:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1889A4C7-76E5-4641-9303-099CB5D346EF} =>

O43 - CFD: 28/04/2011 - 11:22:32 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{193E3DC5-FD91-4F7F-9B61-A5C43067A196} =>

O43 - CFD: 29/06/2011 - 22:18:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{19BD014A-D6C2-47B6-88AD-5BDE03CB32F0} =>

O43 - CFD: 19/07/2011 - 14:19:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1A3D9A6D-2A35-444B-B84F-9144E004D84B} =>

O43 - CFD: 11/10/2011 - 20:54:40 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1B3C6FED-2758-434F-8DBA-2C024852B4B3} =>

O43 - CFD: 23/05/2011 - 15:09:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1C3F3AEA-A921-42D9-9DC9-7F28A0892FCC} =>

O43 - CFD: 14/10/2011 - 14:15:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1D01AB4C-683B-47D3-8DEC-CC346593836C} =>

O43 - CFD: 06/07/2011 - 19:51:40 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{1D0EB7E3-3383-4278-8A49-C4CD2323F247} =>

O43 - CFD: 30/04/2011 - 00:54:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{203B9A1F-4D91-4168-8647-C4AA979B5626} =>

O43 - CFD: 02/06/2011 - 15:49:40 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{24E7B092-DFD1-49BA-BCC5-B4D68C86A789} =>

O43 - CFD: 25/09/2011 - 14:14:04 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{26060EC2-8B6D-4B7B-89D6-9F8B4DD7A107} =>

O43 - CFD: 05/07/2011 - 19:16:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2678CD99-4F2F-4EED-AE54-4ADC41B22E61} =>

O43 - CFD: 18/09/2011 - 17:44:02 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{28DFAB65-A801-4952-985C-8FD4A2540DC6} =>

O43 - CFD: 04/06/2011 - 14:35:00 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{29173480-8297-4A1F-A7F4-C5B42FE41B0F} =>

O43 - CFD: 29/09/2011 - 12:54:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2B596831-0BA6-4CF0-93FB-229926310FE2} =>

O43 - CFD: 04/04/2011 - 13:49:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2B5ED52A-B368-4B6A-A646-17D72EC98D9C} =>

O43 - CFD: 06/05/2011 - 13:09:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2E00A8C0-C845-458D-988A-E6B826B10C90} =>

O43 - CFD: 22/09/2011 - 09:25:24 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2E76632A-5B2E-44F4-B349-65CAE95C2667} =>

O43 - CFD: 26/09/2011 - 10:51:14 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{2F65DD82-DC08-4EE6-A1CC-E0629C6F2EC1} =>

O43 - CFD: 15/05/2011 - 12:55:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{303E77C4-F83D-4ED5-B21A-B4AAE6D89324} =>

O43 - CFD: 28/05/2011 - 13:37:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3313EE53-0865-4F88-B935-152E8A57D5A0} =>

O43 - CFD: 11/06/2011 - 13:14:02 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{347F970C-D77F-4D40-B8AC-F2D20F8D09CE} =>

O43 - CFD: 14/05/2011 - 12:39:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3552E7E3-D3F9-40FF-B09E-0FF02F8ACE94} =>

O43 - CFD: 23/05/2011 - 11:05:40 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3741BEB1-0FEB-4268-A0F3-037C1536CD02} =>

O43 - CFD: 18/06/2011 - 14:47:36 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{386683E5-A097-4BF3-B8FF-A979A276DA29} =>

O43 - CFD: 10/10/2011 - 22:35:00 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3902ECA2-F9B9-472B-9DC2-9F77574A3F13} =>

O43 - CFD: 20/07/2011 - 11:38:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3AE31A85-83EA-4244-A574-02962FA8D332} =>

O43 - CFD: 10/04/2011 - 23:37:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3BEC5BE3-5921-4790-849D-4C235638794C} =>

O43 - CFD: 06/06/2011 - 12:52:06 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3C068413-21D2-44C8-8B92-5E1D73E8E315} =>

O43 - CFD: 05/06/2011 - 23:01:54 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3C5EAA8F-8632-45E7-B5D8-C1053482A208} =>

O43 - CFD: 05/04/2011 - 17:53:40 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3F558DE6-3E78-4811-B1CC-7A20A72C019A} =>

O43 - CFD: 17/10/2011 - 17:33:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{3FF8F030-BE20-4E82-9ADB-C25C71750A32} =>

O43 - CFD: 05/09/2011 - 17:56:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{403391C6-4AD8-49B0-9B37-F331D2C802C6} =>

O43 - CFD: 13/10/2011 - 11:33:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{41EFFCB1-BFCD-4E70-B102-F2659586B6CC} =>

O43 - CFD: 31/05/2011 - 23:31:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{42474999-7F38-4F81-9BE5-6D711BDAD9B0} =>

O43 - CFD: 09/06/2011 - 14:27:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{43848A0C-5EDF-45EC-B413-3AF87195E934} =>

O43 - CFD: 16/04/2011 - 07:34:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{456AE172-8E0B-4AE6-BFC3-FD5D1A965FA6} =>

O43 - CFD: 28/09/2011 - 11:47:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{46B92F7B-4CD7-4BE0-923B-E836FB5DF853} =>

O43 - CFD: 13/07/2011 - 09:32:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{47AFCFF8-FA28-44A7-AE8F-4389C618E264} =>

O43 - CFD: 31/03/2011 - 13:33:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{487E019A-8191-4908-B80D-D4E85FCD1DEE} =>

O43 - CFD: 21/06/2011 - 22:37:06 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4D007350-3532-482D-BFF6-BE81B355CFAF} =>

O43 - CFD: 17/06/2011 - 13:07:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4D854D4F-0DF3-436D-8547-7CD4CEC6DC52} =>

O43 - CFD: 12/08/2011 - 10:00:54 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4E3458D4-E4F4-4575-AC40-0C8E0F9D986C} =>

O43 - CFD: 15/06/2011 - 13:42:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4ECA9E29-E24D-42E9-A904-4774DC5BB8E9} =>

O43 - CFD: 05/10/2011 - 17:46:06 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4EFEE165-EE9D-48A6-A81C-50C03C53FA0B} =>

O43 - CFD: 09/05/2011 - 13:09:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4F2496C4-B670-4475-BD00-C7CE0C9394C7} =>

O43 - CFD: 19/09/2011 - 22:56:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{4FC8EC96-0308-4C7C-B195-489EAB1E8BC1} =>

O43 - CFD: 05/10/2011 - 17:45:36 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5023BEEE-F0E2-4263-95B7-064CA9A0A849} =>

O43 - CFD: 02/10/2011 - 11:34:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{51FD90E1-83C0-4481-A728-A43FFA41BF60} =>

O43 - CFD: 29/04/2011 - 11:07:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{52DC3C7E-D85E-48A0-BADA-E1F2B31EA062} =>

O43 - CFD: 14/10/2011 - 15:59:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{52FC12C3-66F7-493F-AB20-4EDAF8806DC6} =>

O43 - CFD: 18/05/2011 - 11:36:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{54DE51B8-C45C-4BB7-8A05-3A18C60640FD} =>

O43 - CFD: 28/06/2011 - 13:56:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{555FB810-7455-4F14-828B-7994A96BC059} =>

O43 - CFD: 02/05/2011 - 15:17:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{56A9BF12-2574-4B9E-8C52-586CBFBF7D8A} =>

O43 - CFD: 15/07/2011 - 17:40:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5A5C437C-E64D-453F-B7BA-44FC51D4DACB} =>

O43 - CFD: 30/09/2011 - 16:19:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5AEF4660-2AC4-4158-9A64-2DC556DBE200} =>

O43 - CFD: 20/09/2011 - 17:19:36 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5DB254A5-9B60-4403-ACDE-C92F9BA29B72} =>

O43 - CFD: 19/05/2011 - 21:49:02 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5E54E899-6795-4580-B310-067A9BCB6F6C} =>

O43 - CFD: 15/10/2011 - 12:47:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5F498BAB-60AA-49B8-BEED-796BDC03F38F} =>

O43 - CFD: 14/07/2011 - 15:32:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{5FBE34B7-84E5-46E6-B74E-6D1049272D91} =>

O43 - CFD: 10/06/2011 - 10:34:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{632347C7-2AA0-430D-ABE5-EBB9A8D4CDB9} =>

O43 - CFD: 18/09/2011 - 13:46:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{64DA2D0F-0A4F-461C-B686-03662D77DEB3} =>

O43 - CFD: 04/10/2011 - 19:02:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{670BA414-2ECF-4524-A29B-7BE944317D3E} =>

O43 - CFD: 05/05/2011 - 13:30:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{698DD5DA-A64B-478B-B032-3A5381300080} =>

O43 - CFD: 10/05/2011 - 12:55:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6C42618B-55D5-42A0-9557-5D2C7B801C90} =>

O43 - CFD: 24/05/2011 - 20:27:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6C841493-550E-483D-8147-54A589A11C02} =>

O43 - CFD: 30/03/2011 - 22:40:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6C9B96FA-9C0D-4F48-9AE2-6AB2BC32D01F} =>

O43 - CFD: 13/10/2011 - 11:33:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6D60484F-0053-4980-970C-994A9B9D2477} =>

O43 - CFD: 23/06/2011 - 14:28:10 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6E89363D-5130-4B20-B855-16A1C32CF8E2} =>

O43 - CFD: 05/06/2011 - 14:25:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{6FECD3C8-B357-43A5-83A2-CC4C6C3EB422} =>

O43 - CFD: 18/07/2011 - 10:49:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{71B84FEC-B3BF-46B2-B018-1254332CEB13} =>

O43 - CFD: 15/05/2011 - 18:44:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{759E3A15-8573-479F-8937-63857C5D7471} =>

O43 - CFD: 29/07/2011 - 08:19:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{75BC2DF8-8DED-4CC8-AA66-A48E65A18D48} =>

O43 - CFD: 09/05/2011 - 19:59:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{76A66881-E724-46CF-BEDF-9E2A3D84CAFE} =>

O43 - CFD: 28/08/2011 - 16:13:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{7834D413-4812-4C72-BBCB-3E2529860396} =>

O43 - CFD: 18/09/2011 - 17:43:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{7A4D7959-AF9E-4EA3-9EC2-A48C89BD485C} =>

O43 - CFD: 26/08/2011 - 22:20:22 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{7B6B5CF8-D97F-42BE-AEFC-9FB476831281} =>

O43 - CFD: 29/03/2011 - 11:19:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{7C790B38-7C94-4DFC-A334-A80F8C067A0B} =>

O43 - CFD: 14/10/2011 - 14:15:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{7E460D62-41B4-4277-A49D-E5A4ADFB3B22} =>

O43 - CFD: 01/06/2011 - 13:12:32 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{825233D4-A578-401D-9A76-58EC7716956A} =>

O43 - CFD: 16/10/2011 - 17:00:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{83B3257B-F0DF-40C2-A8B4-3CD0D3B03552} =>

O43 - CFD: 30/05/2011 - 12:54:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{846ADFE2-184A-4098-ACA7-F4D4E1DC604C} =>

O43 - CFD: 27/05/2011 - 14:15:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{85D9BF99-3283-4B2C-A616-7239D8873318} =>

O43 - CFD: 28/07/2011 - 20:54:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{86F0D4A8-69D3-4558-8D12-7855ED21AD67} =>

O43 - CFD: 02/04/2011 - 14:59:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{888D2C9A-40AD-4B53-A3E4-A011CD839446} =>

O43 - CFD: 08/04/2011 - 19:05:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{8FA9B34E-D2C9-4AD3-AA80-B28B5F944159} =>

O43 - CFD: 06/06/2011 - 23:30:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{901F7223-FF7F-44F1-A1DD-1F34F554283D} =>

O43 - CFD: 11/04/2011 - 13:06:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{90568722-0514-41F3-A263-93BE74389598} =>

O43 - CFD: 03/06/2011 - 14:29:54 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{98E62F1A-21D0-4EE4-A8DD-8990589862BE} =>

O43 - CFD: 26/05/2011 - 13:15:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{9B34270D-634B-40CD-BCF0-8A61B4FE4671} =>

O43 - CFD: 09/10/2011 - 22:44:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{9C1AF5F2-9E83-42DA-BDED-C84DEFC8146D} =>

O43 - CFD: 26/08/2011 - 22:20:34 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{9C3D06BC-8EFE-4827-8416-7A5C4D471717} =>

O43 - CFD: 02/06/2011 - 16:56:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{9D003000-380E-4098-930A-68011AB7A288} =>

O43 - CFD: 20/05/2011 - 10:04:20 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{9E861854-F4DF-4793-9C0C-21C01BEB2E05} =>

O43 - CFD: 03/04/2011 - 23:41:00 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A0BE52BD-200C-481A-BA49-7F72100204FD} =>

O43 - CFD: 20/09/2011 - 17:14:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A407E219-1C79-4DC2-8E24-93BE890C6553} =>

O43 - CFD: 01/10/2011 - 17:00:24 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A5389B18-76D9-4E4D-B54B-646A45B03454} =>

O43 - CFD: 31/08/2011 - 19:42:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A64EF8A2-CDE1-44D0-ABF8-6ED6AB7948F9} =>

O43 - CFD: 05/09/2011 - 17:53:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A6FF36D2-E86C-46F2-9B28-F372A3E17AF1} =>

O43 - CFD: 30/03/2011 - 09:20:36 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{A7B7D204-34A4-4445-8ECA-B350DC5C92A8} =>

O43 - CFD: 13/07/2011 - 09:10:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AA6B97F6-BD90-441A-8DC2-79A79CD26D08} =>

O43 - CFD: 20/04/2011 - 22:15:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AAACDF95-3493-4EAF-95B8-25A3229B327E} =>

O43 - CFD: 13/04/2011 - 12:48:26 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AB2CBD04-9283-4D04-87A7-129CD547BBF2} =>

O43 - CFD: 12/10/2011 - 12:09:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AC278B62-750A-4C95-AA01-06FAB7A77A04} =>

O43 - CFD: 17/04/2011 - 17:31:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AC4141AA-852A-4A89-AFCA-F990B7DE2BE0} =>

O43 - CFD: 09/09/2011 - 11:05:42 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AD301929-AE1F-4336-BDF6-5A4FCF49CEF9} =>

O43 - CFD: 19/09/2011 - 22:56:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AD58F032-7B86-4A9E-8BA0-BD25459F4039} =>

O43 - CFD: 17/05/2011 - 10:36:46 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AD61DEA2-B93F-4B38-BB24-9E7E741084B5} =>

O43 - CFD: 04/10/2011 - 19:02:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{AF6A4FE8-2FE5-49A3-93A2-2311445EF813} =>

O43 - CFD: 09/10/2011 - 22:44:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{B1AA74BA-10D3-4EF5-BC84-981D29F0C482} =>

O43 - CFD: 29/05/2011 - 11:16:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{B1E047D8-957E-4A2F-9A7F-0FFA91590DD5} =>

O43 - CFD: 02/10/2011 - 11:33:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{B56826EC-0136-444F-B904-D367BF9D4DC0} =>

O43 - CFD: 18/04/2011 - 13:03:34 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{B9C143B5-77E1-432C-A140-549E3E7EE45E} =>

O43 - CFD: 03/05/2011 - 22:29:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BAC7B418-C095-4009-8961-319BF4770A84} =>

O43 - CFD: 05/06/2011 - 16:18:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BCA79187-D5E3-4B27-A1B1-E49682BE2261} =>

O43 - CFD: 19/04/2011 - 15:14:30 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BDF73334-2AAC-4BA3-B300-D697208FAA09} =>

O43 - CFD: 13/04/2011 - 09:55:34 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BF2B30FB-74F0-4EAB-990C-DB969E2D102D} =>

O43 - CFD: 12/05/2011 - 22:54:16 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BF558479-8903-4D71-B9B7-4F3DA946935E} =>

O43 - CFD: 17/07/2011 - 15:40:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{BFF8A5CF-05A3-4013-BCB4-72714A4EBDF9} =>

O43 - CFD: 01/10/2011 - 00:06:06 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{C0525946-5544-4EA0-91E7-D1DD1DAFC106} =>

O43 - CFD: 16/06/2011 - 23:39:32 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{C3DD5740-105A-4C39-8945-9C4C8488F344} =>

O43 - CFD: 06/10/2011 - 20:45:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{C5E58A49-2793-44F9-9103-88A87A2BEA57} =>

O43 - CFD: 26/06/2011 - 18:47:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{C84EFEB0-AB4E-496E-9405-A89E2F600FB1} =>

O43 - CFD: 21/07/2011 - 21:27:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{C9ADF44C-9934-4466-8FC8-05BD30B46B49} =>

O43 - CFD: 04/07/2011 - 10:53:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CBC54114-94EF-4F06-B16D-5FC0A1F4D010} =>

O43 - CFD: 20/09/2011 - 17:15:32 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CD1F6EC7-F6F6-45D5-B4BE-3EC2FEFE4F62} =>

O43 - CFD: 07/04/2011 - 13:24:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CDCB7C17-3E68-40E2-B72C-B6BAA8578F66} =>

O43 - CFD: 14/10/2011 - 16:00:02 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CEAEB5EF-98B6-48CE-AA8C-1DF1D86E8AAA} =>

O43 - CFD: 20/09/2011 - 17:20:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CF66B99B-D017-4BB8-87E7-B25DB5DD086C} =>

O43 - CFD: 10/10/2011 - 22:35:14 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{CF86CF9F-23A5-43E3-A96A-80F5EBCE6503} =>

O43 - CFD: 19/06/2011 - 23:44:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D0A694E0-2647-4368-9843-244D27D13B46} =>

O43 - CFD: 13/05/2011 - 20:04:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D205F64C-EDEB-42D7-B414-38C19420D82B} =>

O43 - CFD: 17/04/2011 - 23:05:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D25703E6-EC0C-402D-A190-4AF3B3883AAB} =>

O43 - CFD: 19/05/2011 - 09:54:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D2C8C3E9-DE22-46D4-8E05-08B48FB7C929} =>

O43 - CFD: 21/04/2011 - 13:02:18 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D8AD9D5D-5F61-4BFE-A60C-9221D71535FF} =>

O43 - CFD: 12/04/2011 - 19:52:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{D9BFDA9D-D091-4054-94E2-B58B64327F69} =>

O43 - CFD: 25/07/2011 - 11:11:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{DA1957BB-4581-40D2-AC3C-ED07E083841F} =>

O43 - CFD: 16/10/2011 - 16:58:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{DBD8840A-D18D-45BD-89C5-0AAA461593DF} =>

O43 - CFD: 14/04/2011 - 13:01:24 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{DCC281E9-8B34-4D89-A789-71D3585F31B2} =>

O43 - CFD: 08/07/2011 - 22:46:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{E3D6DBAD-46D3-4A33-B564-C4D7A5F9E52C} =>

O43 - CFD: 27/06/2011 - 11:35:28 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{E4075ACC-37C3-4565-B1E6-C95B65F369BB} =>

O43 - CFD: 22/09/2011 - 09:24:54 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{E67B8CB0-3B06-4F97-9E35-5F3DAFD172D3} =>

O43 - CFD: 07/10/2011 - 11:37:04 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{E84D2143-45D4-40FB-A34E-A849A576F998} =>

O43 - CFD: 11/05/2011 - 14:36:08 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{E8AC2C95-6100-4768-BC21-2123AEB76D43} =>

O43 - CFD: 18/09/2011 - 13:46:44 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{EAFB72A5-F631-4A43-800D-10AF0AC31E49} =>

O43 - CFD: 06/10/2011 - 20:44:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{EC2DD975-DBFF-4FFE-8BDD-493C65D02C17} =>

O43 - CFD: 01/10/2011 - 17:00:12 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{EDD13AFC-BF06-4519-9E81-EE90C54C17E5} =>

O43 - CFD: 26/07/2011 - 19:23:06 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{EEC2A301-C114-45D6-8077-58A4DA1E444E} =>

O43 - CFD: 17/10/2011 - 17:33:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{EF608B15-517F-4B2D-BCFD-CC2119255CE9} =>

O43 - CFD: 12/06/2011 - 14:09:48 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{F23F9B80-755C-42A1-BF2C-007A1000C1E3} =>

O43 - CFD: 01/05/2011 - 23:51:20 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{F5EF9A3E-A56B-4C2D-8B0A-B40BFE8FC4D2} =>

O43 - CFD: 28/09/2011 - 11:46:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{F7F0DCD2-E029-4204-8C67-D5C88B088906} =>

O43 - CFD: 26/04/2011 - 14:21:36 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{F931FB14-09E4-4604-B244-FCAC169F8D01} =>

O43 - CFD: 05/05/2011 - 10:32:58 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{F960353E-3C01-4390-85C2-489C2A630719} =>

O43 - CFD: 12/08/2011 - 10:01:38 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FA64F5D4-8BB8-4924-9EDC-86AA33A72709} =>

O43 - CFD: 15/04/2011 - 18:21:20 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FB8CA448-3D95-4DB6-AE5C-37DE7E325F17} =>

O43 - CFD: 06/04/2011 - 09:57:32 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FB933556-8CA7-49D7-8E37-9263CAD77779} =>

O43 - CFD: 22/06/2011 - 22:02:04 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FBA85F44-CDB5-40F1-9538-30895B5C541A} =>

O43 - CFD: 04/05/2011 - 12:51:56 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FC55D04D-90A4-44F9-9A7C-56AE0463F7AD} =>

O43 - CFD: 19/07/2011 - 13:25:50 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FE9C1031-A83A-47BC-AD0A-A1B20E3978C3} =>

O43 - CFD: 07/10/2011 - 11:36:52 - [0] ----D- C:\Users\LAURIANE\AppData\Local\{FEB8E4AE-D2F5-4684-AA12-908825930827}

O43 - CFD: 03/08/2011 - 01:42:30 - [0] ----D- C:\Program Files (x86)\FREEzeFrog

C:\Users\LAURIANE\AppData\Roaming\Mozilla\Firefox\Profiles\0eiacw2h.default\extensions\@FissaPlugin

FirewallRaz

EmptyFlash

Emptytemp

 

 

Puis Lance ZHPFix depuis le raccourci du bureau.

 

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)

- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

- Clique sur le bouton « GO » pour lancer le nettoyage,

- Copie/colle la totalité du rapport dans ta prochaine réponse

 

-> laisse travailler l'outil et ne touche à rien ...

 

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

 

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

 

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !

 

Ensuite ceci.

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.

Les Téléchargements - Outils de Xplode - AdwCleaner

 

Lance le, clique sur [Recherche] puis patiente le temps du scan.

Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

 

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[R1].txt

Lien vers le commentaire
Partager sur d’autres sites

Merci pour votre réponse. Voici le 1ère rapport ZHPFix :

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"

"HPCam_Menu"="\"c:\\Program Files (x86)\\Hewlett-Packard\\Media\\Webcam\\MUITransfer\\MUIStartMenu.exe\" \"c:\\Program Files (x86)\\Hewlett-Packard\\Media\\Webcam\" UpdateWithCreateOnce \"Software\\Hewlett-Packard\\Media\\Webcam\""

"QlbCtrl.exe"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Quick Launch Buttons\\QlbCtrl.exe /Start"

"UpdatePRCShortCut"="\"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerRecover\""

"Easybits Recovery"="C:\\Program Files (x86)\\EasyBits For Kids\\ezRecover.exe"

"HP Software Update"="C:\\Program Files (x86)\\Hp\\HP Software Update\\HPWuSchd2.exe"

"WirelessAssistant"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Wireless Assistant\\HPWAMain.exe"

"avast5"="\"C:\\Program Files\\Alwil Software\\Avast5\\avastUI.exe\" /nogui"

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"AllShareAgent"="C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe"

"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

"iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe\" -u auto-update"

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"

"QlbCtrl.exe"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Quick Launch Buttons\\QlbCtrl.exe /Start"

"UpdatePRCShortCut"="\"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerRecover\""

"Easybits Recovery"="C:\\Program Files (x86)\\EasyBits For Kids\\ezRecover.exe"

"HP Software Update"="C:\\Program Files (x86)\\Hp\\HP Software Update\\HPWuSchd2.exe"

"WirelessAssistant"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Wireless Assistant\\HPWAMain.exe"

"avast5"="\"C:\\Program Files\\Alwil Software\\Avast5\\avastUI.exe\" /nogui"

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"AllShareAgent"="C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe"

"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

"iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe\" -u auto-update"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3]

"affid"="1000007044"

"SG_Not_Set"=dword:00000001

"bannerid"=""

"requestor"="6822815"

"cookies_flag"=dword:00000001

"iid"="0001A2E5E5296942A56D767AAC1DBF47446C8D47"

"UserCreateDate"="10/13/2011 04:43:15"

"usr_RCT"="FR"

"sendIds_success"=dword:00000001

"InstallCreateDate"=dword:4e96ced3

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3\Firefox]

"cookies_flag"=dword:00000001

"brwsr"="ff"

"sendIds_success"=dword:00000001

"CID"="10C6963E00000000000000265E857FD6DE3A3C09"

"iid"="13ABF6D3916C034CBCE72AC4BB1F2BB2E270D9B3"

"UID"="C2B0BEB298E78942985AD6C56F3B5336751B65BA"

"usr_RCT"="FR"

"usr_REGION"="j"

"usr_CITY"="boulogne-billancourt"

"usr_SPEED"="xdsl"

"usr_COUNTRY_CODE"="5"

"usr_REGION_CODE"="j"

"usr_CITY_CODE"="3"

"usr_LATITUDE"="48.835"

"usr_LONGITUDE"="2.241"

"usr_URL"=""

"usr_ZIP_CODE"=""

"usr_AREA_CODE"="0"

"usr_GMT_OFFSET"="0"

"usr_DEST"="n"

"usr_DMA"="-1"

"GetCountryTime"=dword:4e97526e

"GetCountryTimeText"="13/10/11 23:04:46"

"CfgNextTime"=dword:4e9e081c

"UserCreateDate"="10/13/2011 04:43:15"

"ServerDeltaTime"=dword:00000000

"ServerDeltaSet"=dword:00000001

"CfgPrcs"=dword:00000000

"LTAR"=dword:014f6c73

"currentResDir"="C:\\Users\\LAURIANE\\AppData\\LocalLow\\ShopperReports3\\Firefox\\cs\\res1"

"NetworkPermission"=dword:00000001

"ShoppingUrl"="http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=GeneralProduct&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"'>http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=GeneralProduct&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"

"TravelUrl"="http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=Travel&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"'>http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=Travel&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"

"NavmainEliminateTime"="20000"

"GuruVersion"="3.0.0.17"

"hbdump"="0"

"COptions/ShopperReports3/General/snoozeTime"="60"

"ServerDisableTime"="1318655788.2288"

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3\IE]

"brwsr"="ie"

"cookies_flag"=dword:00000001

"ShowHbBand"="0"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\FissaSearch]

 

[HKEY_CURRENT_USER\Software\FissaSearch\FF]

"oldHomePage"="www.google.fr"

"oldDefaultSearchEngine"=""

 

[HKEY_CURRENT_USER\Software\FissaSearch\IE]

"oldHomePage"="http://www.duxet.com/"'>http://www.duxet.com/"

"oldDefaultSearchEngine"="{15AE96E9-F094-439C-A792-51EFF23F79E9}"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\OfferBox]

"CID"=dword:0146f5ec

"EME_prefix"="O0A24FR25N21427692"

"server_info"=""

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"SSTP-IN-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=443|App=System|[email protected],-35002|[email protected],-35003|[email protected],-35001|"

"Netlogon-NamedPipe-In"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=445|App=System|[email protected],-1003|[email protected],-1006|[email protected],-1010|"

"SNMPTRAP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=162|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\snmptrap.exe|Svc=SNMPTRAP|[email protected],-7|[email protected],-8|[email protected],-3|"

"SNMPTRAP-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=162|App=%SystemRoot%\\system32\\snmptrap.exe|Svc=SNMPTRAP|[email protected],-7|[email protected],-8|[email protected],-3|"

"WMP-In-UDP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31023|[email protected],-31006|[email protected],-31002|"

"WMP-Out-UDP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31024|[email protected],-31010|[email protected],-31002|"

"WMP-Out-TCP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31025|[email protected],-31014|[email protected],-31002|"

"WMP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31003|[email protected],-31006|[email protected],-31002|"

"WMP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31007|[email protected],-31010|[email protected],-31002|"

"WMP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31011|[email protected],-31014|[email protected],-31002|"

"WMPNSS-QWave-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"WMPNSS-QWave-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"WMPNSS-QWave-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"WMPNSS-QWave-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"WMPNSS-HTTPSTR-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=10243|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"WMPNSS-HTTPSTR-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=10243|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"WMPNSS-WMP-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"WMPNSS-WMP-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"WMPNSS-WMP-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"WMPNSS-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"WMPNSS-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"WMPNSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"WMPNSS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"WMPNSS-QWave-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"WMPNSS-QWave-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"WMPNSS-QWave-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"WMPNSS-QWave-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"WMPNSS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31269|[email protected],-31272|[email protected],-31252|"

"WMPNSS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31273|[email protected],-31276|[email protected],-31252|"

"WMPNSS-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31277|[email protected],-31280|[email protected],-31252|"

"WMPNSS-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31281|[email protected],-31284|[email protected],-31252|"

"WMPNSS-HTTPSTR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"WMPNSS-HTTPSTR-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"WMPNSS-WMP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"WMPNSS-WMP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"WMPNSS-WMP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"WMPNSS-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"WMPNSS-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"WMPNSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"WMPNSS-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"WMPNSS-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-31321|[email protected],-31322|[email protected],-31252|"

"WMPNSS-RME-HTTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=10245|App=System|[email protected],-31501|[email protected],-31502|[email protected],-31500|Edge=TRUE|Defer=App|"

"Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=p2psvc|Name=@%systemroot%\\system32\\provsvc.dll,-200|Desc=@%systemroot%\\system32\\provsvc.dll,-201|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=p2psvc|Name=@%systemroot%\\system32\\provsvc.dll,-203|Desc=@%systemroot%\\system32\\provsvc.dll,-204|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\\system32\\provsvc.dll,-205|Desc=@%systemroot%\\system32\\provsvc.dll,-206|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\\system32\\provsvc.dll,-207|Desc=@%systemroot%\\system32\\provsvc.dll,-208|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"PNRPMNRS-PNRP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-34003|[email protected],-34004|[email protected],-34002|Edge=TRUE|Defer=App|"

"PNRPMNRS-PNRP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-34005|[email protected],-34006|[email protected],-34002|"

"PNRPMNRS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-34007|[email protected],-34008|[email protected],-34002|"

"PNRPMNRS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-34009|[email protected],-34010|[email protected],-34002|"

"RVM-VDS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\vds.exe|Svc=vds|[email protected],-34502|[email protected],-34503|[email protected],-34501|"

"RVM-VDSLDR-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\vdsldr.exe|[email protected],-34504|[email protected],-34505|[email protected],-34501|"

"RVM-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-34506|[email protected],-34507|[email protected],-34501|"

"RVM-VDS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\vds.exe|Svc=vds|[email protected],-34502|[email protected],-34503|[email protected],-34501|"

"RVM-VDSLDR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\vdsldr.exe|[email protected],-34504|[email protected],-34505|[email protected],-34501|"

"RVM-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-34506|[email protected],-34507|[email protected],-34501|"

"Collab-P2PHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32003|[email protected],-32006|[email protected],-32002|Edge=TRUE|Defer=App|"

"Collab-P2PHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32007|[email protected],-32010|[email protected],-32002|"

"Collab-P2PHost-WSD-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32011|[email protected],-32014|[email protected],-32002|"

"Collab-P2PHost-WSD-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32015|[email protected],-32018|[email protected],-32002|"

"Collab-PNRP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-32019|[email protected],-32022|[email protected],-32002|Edge=TRUE|Defer=App|"

"Collab-PNRP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-32023|[email protected],-32026|[email protected],-32002|"

"Collab-PNRP-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32027|[email protected],-32030|[email protected],-32002|"

"Collab-PNRP-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32031|[email protected],-32034|[email protected],-32002|"

"FPS-NB_Session-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"FPS-NB_Session-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"FPS-SMB-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"FPS-SMB-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"FPS-NB_Name-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"FPS-NB_Name-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"FPS-NB_Datagram-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"FPS-NB_Datagram-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"FPS-SpoolSvc-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"FPS-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"FPS-ICMP4-ERQ-In-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP4-ERQ-Out-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-In-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-Out-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"FPS-NB_Session-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"FPS-NB_Session-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"FPS-SMB-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"FPS-SMB-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"FPS-NB_Name-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"FPS-NB_Name-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"FPS-NB_Datagram-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"FPS-NB_Datagram-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"FPS-SpoolSvc-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"FPS-RPCSS-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"FPS-ICMP4-ERQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP4-ERQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"FPS-LLMNR-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"FPS-LLMNR-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"CoreNet-ICMP6-DU-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=1:*|App=System|[email protected],-25110|[email protected],-25112|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PTB-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=2:*|App=System|[email protected],-25001|[email protected],-25007|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PTB-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=2:*|[email protected],-25002|[email protected],-25007|[email protected],-25000|"

"CoreNet-ICMP6-TE-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=3:*|App=System|[email protected],-25113|[email protected],-25115|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-TE-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=3:*|[email protected],-25114|[email protected],-25115|[email protected],-25000|"

"CoreNet-ICMP6-PP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=4:*|App=System|[email protected],-25116|[email protected],-25118|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=4:*|[email protected],-25117|[email protected],-25118|[email protected],-25000|"

"CoreNet-ICMP6-NDS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=135:*|App=System|[email protected],-25019|[email protected],-25025|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-NDS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=135:*|[email protected],-25020|[email protected],-25025|[email protected],-25000|"

"CoreNet-ICMP6-NDA-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|[email protected],-25026|[email protected],-25032|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-NDA-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=136:*|[email protected],-25027|[email protected],-25032|[email protected],-25000|"

"CoreNet-ICMP6-RA-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=134:*|RA6=fe80::/64|App=System|[email protected],-25012|[email protected],-25018|[email protected],-25000|"

"CoreNet-ICMP6-RA-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|[email protected],-25013|[email protected],-25018|[email protected],-25000|"

"CoreNet-ICMP6-RS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=133:*|App=System|[email protected],-25009|[email protected],-25011|[email protected],-25000|"

"CoreNet-ICMP6-RS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=133:*|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::2|[email protected],-25008|[email protected],-25011|[email protected],-25000|"

"CoreNet-ICMP6-LQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|App=System|[email protected],-25061|[email protected],-25067|[email protected],-25000|"

"CoreNet-ICMP6-LQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|[email protected],-25062|[email protected],-25067|[email protected],-25000|"

"CoreNet-ICMP6-LR-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|App=System|[email protected],-25068|[email protected],-25074|[email protected],-25000|"

"CoreNet-ICMP6-LR-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|[email protected],-25069|[email protected],-25074|[email protected],-25000|"

"CoreNet-ICMP6-LR2-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|App=System|[email protected],-25075|[email protected],-25081|[email protected],-25000|"

"CoreNet-ICMP6-LR2-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|[email protected],-25076|[email protected],-25081|[email protected],-25000|"

"CoreNet-ICMP6-LD-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|App=System|[email protected],-25082|[email protected],-25088|[email protected],-25000|"

"CoreNet-ICMP6-LD-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|[email protected],-25083|[email protected],-25088|[email protected],-25000|"

"CoreNet-ICMP4-DUFRAG-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|ICMP4=3:4|App=System|[email protected],-25251|[email protected],-25257|[email protected],-25000|"

"CoreNet-IGMP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=2|App=System|[email protected],-25376|[email protected],-25382|[email protected],-25000|"

"CoreNet-IGMP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|[email protected],-25377|[email protected],-25382|[email protected],-25000|"

"CoreNet-DHCP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25301|[email protected],-25303|[email protected],-25000|"

"CoreNet-DHCP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25302|[email protected],-25303|[email protected],-25000|"

"CoreNet-DHCPV6-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25304|[email protected],-25306|[email protected],-25000|"

"CoreNet-DHCPV6-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25305|[email protected],-25306|[email protected],-25000|"

"CoreNet-Teredo-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=Teredo|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25326|[email protected],-25332|[email protected],-25000|"

"CoreNet-Teredo-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25327|[email protected],-25333|[email protected],-25000|"

"CoreNet-IPHTTPS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort2_10=IPTLSIn|LPort2_10=IPHTTPSIn|App=System|[email protected],-25426|[email protected],-25428|[email protected],-25000|"

"CoreNet-IPHTTPS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25427|[email protected],-25429|[email protected],-25000|"

"CoreNet-IPv6-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=41|App=System|[email protected],-25351|[email protected],-25357|[email protected],-25000|"

"CoreNet-IPv6-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|App=System|[email protected],-25352|[email protected],-25358|[email protected],-25000|"

"CoreNet-GP-NP-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|[email protected],-25401|[email protected],-25401|[email protected],-25000|"

"CoreNet-GP-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|[email protected],-25403|[email protected],-25404|[email protected],-25000|"

"CoreNet-DNS-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|RPort=53|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-25405|[email protected],-25406|[email protected],-25000|"

"CoreNet-GP-LSASS-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\lsass.exe|[email protected],-25407|[email protected],-25408|[email protected],-25000|"

"PerfLogsAlerts-PLASrv-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\plasrv.exe|[email protected],-34753|[email protected],-34754|[email protected],-34752|"

"PerfLogsAlerts-DCOM-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34755|[email protected],-34756|[email protected],-34752|"

"PerfLogsAlerts-PLASrv-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\\system32\\plasrv.exe|[email protected],-34753|[email protected],-34754|[email protected],-34752|"

"PerfLogsAlerts-DCOM-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%systemroot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34755|[email protected],-34756|[email protected],-34752|"

"MsiScsi-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29003|[email protected],-29006|[email protected],-29002|"

"MsiScsi-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29007|[email protected],-29010|[email protected],-29002|"

"MsiScsi-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29003|[email protected],-29006|[email protected],-29002|"

"MsiScsi-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29007|[email protected],-29010|[email protected],-29002|"

"WMI-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34252|[email protected],-34253|[email protected],-34251|"

"WMI-WINMGMT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34254|[email protected],-34255|[email protected],-34251|"

"WMI-WINMGMT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34258|[email protected],-34259|[email protected],-34251|"

"WMI-ASYNC-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\\system32\\wbem\\unsecapp.exe|[email protected],-34256|[email protected],-34257|[email protected],-34251|"

"WMI-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34252|[email protected],-34253|[email protected],-34251|"

"WMI-WINMGMT-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34254|[email protected],-34255|[email protected],-34251|"

"WMI-WINMGMT-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34258|[email protected],-34259|[email protected],-34251|"

"WMI-ASYNC-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\wbem\\unsecapp.exe|[email protected],-34256|[email protected],-34257|[email protected],-34251|"

"RRAS-GRE-In"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=47|App=System|[email protected],-33769|[email protected],-33772|[email protected],-33752|"

"RRAS-GRE-Out"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=47|App=System|[email protected],-33773|[email protected],-33776|[email protected],-33752|"

"RRAS-L2TP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1701|App=System|[email protected],-33753|[email protected],-33756|[email protected],-33752|"

"RRAS-L2TP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1701|App=System|[email protected],-33757|[email protected],-33760|[email protected],-33752|"

"RRAS-PPTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=1723|App=System|[email protected],-33765|[email protected],-33768|[email protected],-33752|"

"RRAS-PPTP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=1723|App=System|[email protected],-33761|[email protected],-33764|[email protected],-33752|"

"NETDIS-UPnPHost-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"NETDIS-SSDPSrv-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"NETDIS-SSDPSrv-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"NETDIS-UPnPHost-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-UPnP-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-FDPHOST-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"NETDIS-FDPHOST-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"NETDIS-LLMNR-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"NETDIS-LLMNR-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"NETDIS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"NETDIS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"NETDIS-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"NETDIS-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-FDPHOST-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"NETDIS-FDPHOST-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"NETDIS-LLMNR-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"NETDIS-LLMNR-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"RemoteSvcAdmin-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\services.exe|[email protected],-29503|[email protected],-29506|[email protected],-29502|"

"RemoteSvcAdmin-NP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-29507|[email protected],-29510|[email protected],-29502|"

"RemoteSvcAdmin-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29515|[email protected],-29518|[email protected],-29502|"

"RemoteSvcAdmin-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\services.exe|[email protected],-29503|[email protected],-29506|[email protected],-29502|"

"RemoteSvcAdmin-NP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-29507|[email protected],-29510|[email protected],-29502|"

"RemoteSvcAdmin-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29515|[email protected],-29518|[email protected],-29502|"

"RemoteTask-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=schedule|[email protected],-33253|[email protected],-33256|[email protected],-33252|"

"RemoteTask-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33257|[email protected],-33260|[email protected],-33252|"

"RemoteTask-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=schedule|[email protected],-33253|[email protected],-33256|[email protected],-33252|"

"RemoteTask-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33257|[email protected],-33260|[email protected],-33252|"

"MSDTC-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33503|[email protected],-33506|[email protected],-33502|"

"MSDTC-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33507|[email protected],-33510|[email protected],-33502|"

"MSDTC-KTMRM-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=ktmrm|[email protected],-33511|[email protected],-33512|[email protected],-33502|"

"MSDTC-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33513|[email protected],-33514|[email protected],-33502|"

"MSDTC-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33503|[email protected],-33506|[email protected],-33502|"

"MSDTC-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33507|[email protected],-33510|[email protected],-33502|"

"MSDTC-KTMRM-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ktmrm|[email protected],-33511|[email protected],-33512|[email protected],-33502|"

"MSDTC-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33513|[email protected],-33514|[email protected],-33502|"

"RemoteEventLogSvc-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=Eventlog|[email protected],-29253|[email protected],-29256|[email protected],-29252|"

"RemoteEventLogSvc-NP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-29257|[email protected],-29260|[email protected],-29252|"

"RemoteEventLogSvc-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29265|[email protected],-29268|[email protected],-29252|"

"RemoteEventLogSvc-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Eventlog|[email protected],-29253|[email protected],-29256|[email protected],-29252|"

"RemoteEventLogSvc-NP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-29257|[email protected],-29260|[email protected],-29252|"

"RemoteEventLogSvc-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29265|[email protected],-29268|[email protected],-29252|"

"WINRM-HTTP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5985|App=System|[email protected],-30253|[email protected],-30256|[email protected],-30252|"

"WINRM-HTTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5985|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30253|[email protected],-30256|[email protected],-30252|"

"WINRM-HTTP-Compat-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=80|App=System|[email protected],-35001|[email protected],-35002|[email protected],-30252|"

"WINRM-HTTP-Compat-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=80|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-35001|[email protected],-35002|[email protected],-30252|"

"RemoteFwAdmin-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=policyagent|[email protected],-30003|[email protected],-30006|[email protected],-30002|"

"RemoteFwAdmin-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-30007|[email protected],-30010|[email protected],-30002|"

"RemoteFwAdmin-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=policyagent|[email protected],-30003|[email protected],-30006|[email protected],-30002|"

"RemoteFwAdmin-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-30007|[email protected],-30010|[email protected],-30002|"

"RemoteAssistance-In-TCP-EdgeScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33003|[email protected],-33006|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33007|[email protected],-33010|[email protected],-33002|"

"RemoteAssistance-PnrpSvc-UDP-In-EdgeScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=3540|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33039|[email protected],-33040|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-PnrpSvc-UDP-OUT"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33037|[email protected],-33038|[email protected],-33002|"

"RemoteAssistance-RAServer-In-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\raserver.exe|[email protected],-33011|[email protected],-33014|[email protected],-33002|"

"RemoteAssistance-RAServer-Out-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\raserver.exe|[email protected],-33015|[email protected],-33018|[email protected],-33002|"

"RemoteAssistance-DCOM-In-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-33035|[email protected],-33036|[email protected],-33002|"

"RemoteAssistance-In-TCP-EdgeScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33003|[email protected],-33006|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33007|[email protected],-33010|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33019|[email protected],-33022|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33023|[email protected],-33026|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33027|[email protected],-33030|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33031|[email protected],-33034|[email protected],-33002|"

"RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=3540|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33039|[email protected],-33040|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-PnrpSvc-UDP-OUT-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33037|[email protected],-33038|[email protected],-33002|"

"WPDMTP-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\wudfhost.exe|[email protected],-30503|[email protected],-30506|[email protected],-30502|"

"WPDMTP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\wudfhost.exe|[email protected],-30503|[email protected],-30506|[email protected],-30502|"

"WPDMTP-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30507|[email protected],-30510|[email protected],-30502|"

"WPDMTP-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30511|[email protected],-30514|[email protected],-30502|"

"WPDMTP-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30515|[email protected],-30518|[email protected],-30502|"

"WPDMTP-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-30519|[email protected],-30522|[email protected],-30502|"

"WPDMTP-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-30523|[email protected],-30524|[email protected],-30502|"

"{5E1CC901-B7C4-4393-AE3A-0C376D71CE52}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\ONENOTE.EXE|Name=Microsoft Office OneNote|"

"{A05D3340-8797-460A-98B1-08250B1C74E8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\ONENOTE.EXE|Name=Microsoft Office OneNote|"

"{1B1E1807-19BC-4933-A75C-9D73C24FD341}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\CyberLink\\PowerDirector\\PDR.EXE|Name=CyberLink PowerDirector|Desc=CyberLink PowerDirector|"

"NetPres-WSDEVNT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|[email protected],-31769|[email protected],-31770|[email protected],-31752|"

"NetPres-WSDEVNT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|[email protected],-31771|[email protected],-31772|[email protected],-31752|"

"NetPres-WSDEVNTS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|[email protected],-31773|[email protected],-31774|[email protected],-31752|"

"NetPres-WSDEVNTS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|[email protected],-31775|[email protected],-31776|[email protected],-31752|"

"NetPres-WSDEVNT-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31769|[email protected],-31770|[email protected],-31752|"

"NetPres-WSDEVNT-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31771|[email protected],-31772|[email protected],-31752|"

"NetPres-WSDEVNTS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31773|[email protected],-31774|[email protected],-31752|"

"NetPres-WSDEVNTS-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31775|[email protected],-31776|[email protected],-31752|"

"MCX-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30753|[email protected],-30756|[email protected],-30752|"

"MCX-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30757|[email protected],-30760|[email protected],-30752|"

"MCX-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=554|LPort=8554|LPort=8555|LPort=8556|LPort=8557|LPort=8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30761|[email protected],-30764|[email protected],-30752|"

"MCX-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30765|[email protected],-30768|[email protected],-30752|"

"MCX-QWave-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30769|[email protected],-30772|[email protected],-30752|"

"MCX-QWave-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30773|[email protected],-30776|[email protected],-30752|"

"MCX-QWave-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30777|[email protected],-30780|[email protected],-30752|"

"MCX-QWave-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30781|[email protected],-30784|[email protected],-30752|"

"MCX-HTTPSTR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=10244|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30785|[email protected],-30788|[email protected],-30752|"

"MCX-TERMSRV-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3390|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30793|[email protected],-30796|[email protected],-30752|"

"MCX-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=7777|LPort=7778|LPort=7779|LPort=7780|LPort=7781|LPort=5004|LPort=5005|LPort=50004|LPort=50005|LPort=50006|LPort=50007|LPort=50008|LPort=50009|LPort=50010|LPort=50011|LPort=50012|LPort=50013|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30801|[email protected],-30804|[email protected],-30752|"

"MCX-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30805|[email protected],-30808|[email protected],-30752|"

"MCX-MCX2SVC-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=mcx2svc|[email protected],-30810|[email protected],-30811|[email protected],-30752|"

"MCX-Prov-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\ehome\\mcx2prov.exe|[email protected],-30812|[email protected],-30813|[email protected],-30752|"

"MCX-PlayTo-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30814|[email protected],-30815|[email protected],-30752|"

"MCX-PlayTo-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-30816|[email protected],-30817|[email protected],-30752|"

"MCX-McrMgr-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\ehome\\mcrmgr.exe|[email protected],-30818|[email protected],-30819|[email protected],-30752|"

"MCX-PlayTo-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30820|[email protected],-30821|[email protected],-30752|"

"MCX-FDPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-30822|[email protected],-30823|[email protected],-30752|"

"{3620E56F-9E40-42DB-AAD0-B60E9D531507}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\Media\\DVD\\HPDVDSmart.exe|Name=HP MediaSmart DVD|Desc=HP MediaSmart DVD|"

"{4C4B2AA7-9EA1-4DD4-A629-B824705C94C6}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartMusic.exe|Name=HP TouchSmart Music|Desc=HP TouchSmart Music|"

"{D0D54151-D63B-4AD0-A818-4B66C363104F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartPhoto.exe|Name=HP TouchSmart Photo|Desc=HP TouchSmart Photo|"

"{41F33EDC-46E1-45AE-9465-D33799BDF3D2}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartVideo.exe|Name=HP TouchSmart Video|Desc=HP TouchSmart Video|"

"{900EA1C9-AF2F-44F9-A9C7-F52483056C8C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\TSMAgent.exe|Name=HP TouchSmart Media Resident Program|Desc=HP TouchSmart Media Resident Program|"

"{2C65663C-73F5-4C08-A8DF-363B3B5E76FB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\Kernel\\CLML\\CLMLSvc.exe|Name=CyberLink Media Service|Desc=CyberLink Media Service|"

"{0DECAADB-4EF5-48A1-A026-68FAC8F6DC2E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=6004|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\outlook.exe|Name=Microsoft Office Outlook|"

"{B8465D37-9C6E-4A8C-908E-536CD93F62A5}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31011|[email protected],-31014|[email protected],-31002|"

"{EFC91097-870D-458F-917F-7B6BCD4F9D45}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31007|[email protected],-31010|[email protected],-31002|"

"{659B3079-BFCE-48AB-8D34-45FEC96919C1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31003|[email protected],-31006|[email protected],-31002|"

"{EA77B596-BB20-4861-B78E-7809DDEBBE03}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31025|[email protected],-31014|[email protected],-31002|"

"{EDB01610-12CF-4B33-ADEA-44A7C532FFFD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31024|[email protected],-31010|[email protected],-31002|"

"{0EF7C12F-2677-4108-B3BD-8C2E70C39287}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31023|[email protected],-31006|[email protected],-31002|"

"{9A398D9E-37DF-4C4E-90FD-61DE2F7B377A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-31321|[email protected],-31322|[email protected],-31252|"

"{E17C5EDA-F376-4D5D-96F1-CD692C56AAFD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"{5B51C6B3-A186-4D60-B383-2EDF45E57078}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"{25C17D92-6E53-4ACD-8042-C686015979CD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"{E94202B0-80A7-4A50-AB8B-C3D04E26D892}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"{77931C09-7F09-4D9B-BFBE-46FED033719D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"{F35B2CD1-5A1A-4B29-B02B-5C2299A121A3}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"{BC6C4697-2334-4582-A0B6-642E2E8B352D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"{D1D5AA08-7765-4550-94B1-24FEFE099863}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"{7D30A0D5-BA19-4360-9779-FC4CC0987A2C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"{E0B84E65-77F0-4EC3-B652-4CC7E66B8773}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31281|[email protected],-31284|[email protected],-31252|"

"{96F6962A-9977-4BD1-BF7D-E0FBA6859659}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31277|[email protected],-31280|[email protected],-31252|"

"{29C6B1DD-625F-4472-A597-E40B8A5EB569}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31273|[email protected],-31276|[email protected],-31252|"

"{0E106C62-AD90-48E7-AD6C-5C2F984AFEF4}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31269|[email protected],-31272|[email protected],-31252|"

"{1EEED7E3-C3C3-4C82-A65C-330E6D58D1FE}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"{FF4356D4-9E2B-4249-91ED-B9AF1F3B30DB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"{6309F8EA-A599-4559-A596-CDB22A3F4124}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"{7C6F662E-453E-4FED-9F1C-CC526DF2211B}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"{FFC8913E-1D67-465A-947C-6E3B56A1C556}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"{D158FBF2-8F30-45F1-8946-E4501B25305F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"{3CD89A8E-812F-413D-8016-F6240F157B0E}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"{B9B08ABA-DECC-437E-B794-3C2C692F160E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"{D8857BA5-9284-454B-B346-8FE073C580FD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"{9527BED0-B460-4671-946C-5A084AEEE901}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"{E9101852-2FEA-41EA-BCA6-D0F9EA52573F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"{E2F4D0EB-481E-4B55-B773-F4E65ED2C311}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"{1506D210-8430-49DB-9E6C-02729F2D2F8B}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"{B25EA4E0-88D7-4141-A809-72E84D037DB8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"{459DC623-B572-48B8-9BDB-AD1AD27F2773}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"{B0A2C8D1-A095-4636-8A60-405D6D6E49F4}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"{1C318198-7FF6-48B2-92D7-5AFA947B4D22}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"{0C134D3A-7348-412B-9E8A-86D3E9E03E27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"{96F9FAA3-BFCC-4177-9373-807602A677EA}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"{236E300F-C8BD-4322-A8C5-3C0E75C76F3D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"{33CB8B90-A2EE-42C8-B648-BA8A57C6206A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"{15052965-7A20-4481-AC94-A09D299BA610}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"{9621A5C2-D464-4724-8106-3B58C6E26774}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Messenger\\msnmsgr.exe|Name=Windows Live Messenger|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|Edge=TRUE|"

"{9F295257-B584-4C73-91AF-72B3218EEB2F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=Windows Live Messenger (UPnP-In)|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|"

"{38DB2E02-624A-4EDE-A99B-10FAE2EBE81C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=svchost.exe|Svc=ssdpsrv|Name=Windows Live Messenger (SSDP-In)|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|"

"TCP Query User{4F54F30D-F248-40CC-8206-266A273D4538}C:\\program files (x86)\\mozilla firefox\\firefox.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\program files (x86)\\mozilla firefox\\firefox.exe|Name=Firefox|Desc=Firefox|Defer=User|"

"UDP Query User{6F832398-70CB-4E60-81D4-E3370F8C2372}C:\\program files (x86)\\mozilla firefox\\firefox.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\program files (x86)\\mozilla firefox\\firefox.exe|Name=Firefox|Desc=Firefox|Defer=User|"

"{213862A0-7D05-444E-8775-6A9B95EA7A14}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Contacts\\wlcomm.exe|Name=Windows Live Communications Platform|Edge=TRUE|"

"{E45711AC-32B0-4E37-91DE-897C716F3981}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (UPnP)|"

"{0FD93363-E35A-496B-A1C0-CA865C7CFFCE}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (SSDP)|"

"{FEB23F57-8BF1-4C71-B5F7-0D869E98FB22}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{2EA4ACBD-2575-4D52-8FED-1E1AC077EBA1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{047EDC01-14C2-45A5-BF0E-644998CC00FF}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"{CF8C6941-00CE-4F11-9475-64EDAB6106EF}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"{D87CECA8-FDCD-4A59-91E6-30D36E1E317D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"{9D122FD2-4A87-48DC-B095-2A2E2A055DE1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"{2EFFF649-018E-4817-80A9-0655A51261BB}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"{B52442C3-FFB6-4DBD-BA2F-FD2A5E0BB646}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"{2364FFFD-A078-4FC6-9967-D6B02644502D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"{FDB4323E-B151-4E14-85E2-B0E58ED2066A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"{BB96BDCF-6B9D-44C7-A77C-11BF703BA2F7}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"{5368CCD6-1167-45FE-95C3-F6CD9901217F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Mesh\\MOE.exe|Name=Windows Live Mesh|Edge=TRUE|"

"TCP Query User{8745D950-546D-4B0C-AA34-8C69C1050543}F:\\empires2.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=F:\\empires2.exe|Name=Age of Empires II|Desc=Age of Empires II|Defer=User|"

"UDP Query User{CE8C498C-E24E-410B-819F-58835B0B0891}F:\\empires2.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=F:\\empires2.exe|Name=Age of Empires II|Desc=Age of Empires II|Defer=User|"

"TCP Query User{9DB259F4-4631-4344-A40A-53BC48A0376A}F:\\age2_exp.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|Profile=Public|App=F:\\age2_exp.exe|Name=Age of Empires II Expansion|Desc=Age of Empires II Expansion|Defer=User|"

"UDP Query User{BCA06DB4-5FA2-43C1-B750-B4C96EC07CC5}F:\\age2_exp.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|Profile=Public|App=F:\\age2_exp.exe|Name=Age of Empires II Expansion|Desc=Age of Empires II Expansion|Defer=User|"

"{939C60F3-983E-4B9D-B8DF-B48A2A0C1290}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe|Name=WebKit|Edge=TRUE|"

"{472E43B6-B88F-4C49-A3A7-108EAC9A8129}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{3D8537EB-FCD9-4187-B612-A52B59680BAA}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"TCP Query User{538B4EA5-FB1B-4119-8307-97388A34E180}C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe|Name=Java Platform SE binary|Desc=Java Platform SE binary|Defer=User|"

"UDP Query User{D885DCC0-DC2A-4548-86B8-8A9517DE53B7}C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe|Name=Java Platform SE binary|Desc=Java Platform SE binary|Defer=User|"

"{89BE5CAA-5D8F-4863-A39D-D08E22EEBE5E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareDMS\\AllShareDMS.exe|Name=Samsung AllShare Service|"

"{16277207-5A21-4280-BAFD-EBFF16E6BAC2}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShare.exe|Name=Samsung AllShare Player|"

"{F97E3A71-1B1C-47FB-936C-DADE2D78E121}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe|Name=Samsung AllShare Agent|"

"{ACD0A677-09F1-479B-BF87-CB537FA64955}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=54010|Name=Samsung AllShare SlideShow Service|"

"{F393C4FA-CE5C-406F-B585-996E88320AAD}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{A77E16BD-11A4-4873-B877-BA94EC070FC5}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{9DA5F059-CFA7-4149-8F60-FDC1E44D183D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files (x86)\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{4BD8E1ED-0BFD-4F2D-A30C-37750580DAD0}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files (x86)\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{007E72EF-F2DC-48E6-93FB-A8A1F2A33F11}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\iTunes\\iTunes.exe|Name=iTunes|Edge=TRUE|"

"{9B2E0213-5C88-4DDE-806D-242AAF23AEF6}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=48113|RA4=LocalSubnet|RA6=LocalSubnet|Name=maconfig_tcp|"

"{D98E06B3-1268-4BE5-8041-3420152A6F18}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=48113|RA4=LocalSubnet|RA6=LocalSubnet|Name=maconfig_udp|"

"{F223B950-8F03-459D-81ED-92855E4F2807}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\\Program Files (x86)\\ma-config.com\\maconfservice.exe|Name=maconfservice|"

"{6E165194-D9F4-4E72-8CF0-A8F5DBDA32AD}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\\Program Files (x86)\\ma-config.com\\maconfservice.exe|Name=maconfservice|"

 

 

 

Puis le 2ème :

Rapport de ZHPFix 1.12.3365 par Nicolas Coolman, Update du 18/10/2011

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-21-10-2011-20-27-55.txt

Run by LAURIANE at 21/10/2011 20:27:55

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Web site : ZHPFix Fix de rapport

 

========== Clé(s) du Registre ==========

SUPPRIME Key: HKCU\Software\AppDataLow\Software\ShopperReports3

SUPPRIME Key: HKCU\Software\FissaSearch

SUPPRIME Key: HKCU\Software\OfferBox

ABSENT Key: HKLM\Software\FREEzeFrog

ABSENT Key: HKLM\Software\OfferBox

 

========== Valeur(s) du Registre ==========

SUPPRIME RunValue: HPCam_Menu

SUPPRIME RunValue: UpdatePRCShortCut

ABSENT Valeur Standard Profile: FirewallRaz :

ABSENT Valeur Domain Profile: FirewallRaz :

SUPPRIME FirewallRaz (None) : {9F295257-B584-4C73-91AF-72B3218EEB2F}

SUPPRIME FirewallRaz (Private) : TCP Query User{8745D950-546D-4B0C-AA34-8C69C1050543}F:\empires2.exe

SUPPRIME FirewallRaz (Private) : UDP Query User{CE8C498C-E24E-410B-819F-58835B0B0891}F:\empires2.exe

SUPPRIME FirewallRaz (Public) : TCP Query User{9DB259F4-4631-4344-A40A-53BC48A0376A}F:\age2_exp.exe

SUPPRIME FirewallRaz (Public) : UDP Query User{BCA06DB4-5FA2-43C1-B750-B4C96EC07CC5}F:\age2_exp.exe

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Roaming\Mozilla\Firefox\Profiles\0eiacw2h.default\extensions\@FissaPlugin

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Roaming\OfferBox

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{011CBFED-3752-4824-B834-2A381E1D152F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{01F06593-BC16-491F-AC03-EDCB457BF654}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{02246E71-0AD5-4E1C-A135-91318C8E3B54}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0240751A-C332-4FD1-9849-1827B053F334}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{034D1A91-69B5-4A2B-95FC-4E62AF40C45C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{06D5C5E7-32DB-44D8-A15A-241980D3D7DC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{08383216-A2FC-4B39-948D-8DAFA7EC97E3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0CE1ED87-7611-481C-97B4-5EB107971F08}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0E85D462-4DB5-468A-A965-B214C393321C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{11B84EF6-C375-48B7-8283-6E380AF020AE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{127C3CAE-202F-41DB-98E5-04921BC3F56B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{166AF781-5D30-4D30-860E-0BAE06ABFF11}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1708FCF0-FE8B-458B-A140-1EF9AA90DA3F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1889A4C7-76E5-4641-9303-099CB5D346EF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{193E3DC5-FD91-4F7F-9B61-A5C43067A196}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{19BD014A-D6C2-47B6-88AD-5BDE03CB32F0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1A3D9A6D-2A35-444B-B84F-9144E004D84B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1B3C6FED-2758-434F-8DBA-2C024852B4B3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1C3F3AEA-A921-42D9-9DC9-7F28A0892FCC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1D01AB4C-683B-47D3-8DEC-CC346593836C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1D0EB7E3-3383-4278-8A49-C4CD2323F247}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{203B9A1F-4D91-4168-8647-C4AA979B5626}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{24E7B092-DFD1-49BA-BCC5-B4D68C86A789}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{26060EC2-8B6D-4B7B-89D6-9F8B4DD7A107}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2678CD99-4F2F-4EED-AE54-4ADC41B22E61}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{28DFAB65-A801-4952-985C-8FD4A2540DC6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{29173480-8297-4A1F-A7F4-C5B42FE41B0F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2B596831-0BA6-4CF0-93FB-229926310FE2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2B5ED52A-B368-4B6A-A646-17D72EC98D9C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2E00A8C0-C845-458D-988A-E6B826B10C90}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2E76632A-5B2E-44F4-B349-65CAE95C2667}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2F65DD82-DC08-4EE6-A1CC-E0629C6F2EC1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{303E77C4-F83D-4ED5-B21A-B4AAE6D89324}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3313EE53-0865-4F88-B935-152E8A57D5A0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{347F970C-D77F-4D40-B8AC-F2D20F8D09CE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3552E7E3-D3F9-40FF-B09E-0FF02F8ACE94}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3741BEB1-0FEB-4268-A0F3-037C1536CD02}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{386683E5-A097-4BF3-B8FF-A979A276DA29}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3902ECA2-F9B9-472B-9DC2-9F77574A3F13}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3AE31A85-83EA-4244-A574-02962FA8D332}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3BEC5BE3-5921-4790-849D-4C235638794C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3C068413-21D2-44C8-8B92-5E1D73E8E315}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3C5EAA8F-8632-45E7-B5D8-C1053482A208}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3F558DE6-3E78-4811-B1CC-7A20A72C019A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3FF8F030-BE20-4E82-9ADB-C25C71750A32}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{403391C6-4AD8-49B0-9B37-F331D2C802C6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{41EFFCB1-BFCD-4E70-B102-F2659586B6CC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{42474999-7F38-4F81-9BE5-6D711BDAD9B0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{43848A0C-5EDF-45EC-B413-3AF87195E934}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{456AE172-8E0B-4AE6-BFC3-FD5D1A965FA6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{46B92F7B-4CD7-4BE0-923B-E836FB5DF853}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{47AFCFF8-FA28-44A7-AE8F-4389C618E264}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{487E019A-8191-4908-B80D-D4E85FCD1DEE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4D007350-3532-482D-BFF6-BE81B355CFAF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4D854D4F-0DF3-436D-8547-7CD4CEC6DC52}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4E3458D4-E4F4-4575-AC40-0C8E0F9D986C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4ECA9E29-E24D-42E9-A904-4774DC5BB8E9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4EFEE165-EE9D-48A6-A81C-50C03C53FA0B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4F2496C4-B670-4475-BD00-C7CE0C9394C7}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4FC8EC96-0308-4C7C-B195-489EAB1E8BC1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5023BEEE-F0E2-4263-95B7-064CA9A0A849}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{51FD90E1-83C0-4481-A728-A43FFA41BF60}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{52DC3C7E-D85E-48A0-BADA-E1F2B31EA062}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{52FC12C3-66F7-493F-AB20-4EDAF8806DC6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{54DE51B8-C45C-4BB7-8A05-3A18C60640FD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{555FB810-7455-4F14-828B-7994A96BC059}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{56A9BF12-2574-4B9E-8C52-586CBFBF7D8A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5A5C437C-E64D-453F-B7BA-44FC51D4DACB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5AEF4660-2AC4-4158-9A64-2DC556DBE200}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5DB254A5-9B60-4403-ACDE-C92F9BA29B72}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5E54E899-6795-4580-B310-067A9BCB6F6C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5F498BAB-60AA-49B8-BEED-796BDC03F38F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5FBE34B7-84E5-46E6-B74E-6D1049272D91}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{632347C7-2AA0-430D-ABE5-EBB9A8D4CDB9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{64DA2D0F-0A4F-461C-B686-03662D77DEB3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{670BA414-2ECF-4524-A29B-7BE944317D3E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{698DD5DA-A64B-478B-B032-3A5381300080}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C42618B-55D5-42A0-9557-5D2C7B801C90}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C841493-550E-483D-8147-54A589A11C02}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C9B96FA-9C0D-4F48-9AE2-6AB2BC32D01F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6D60484F-0053-4980-970C-994A9B9D2477}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6E89363D-5130-4B20-B855-16A1C32CF8E2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6FECD3C8-B357-43A5-83A2-CC4C6C3EB422}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{71B84FEC-B3BF-46B2-B018-1254332CEB13}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{759E3A15-8573-479F-8937-63857C5D7471}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{75BC2DF8-8DED-4CC8-AA66-A48E65A18D48}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{76A66881-E724-46CF-BEDF-9E2A3D84CAFE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7834D413-4812-4C72-BBCB-3E2529860396}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7A4D7959-AF9E-4EA3-9EC2-A48C89BD485C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7B6B5CF8-D97F-42BE-AEFC-9FB476831281}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7C790B38-7C94-4DFC-A334-A80F8C067A0B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7E460D62-41B4-4277-A49D-E5A4ADFB3B22}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{825233D4-A578-401D-9A76-58EC7716956A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{83B3257B-F0DF-40C2-A8B4-3CD0D3B03552}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{846ADFE2-184A-4098-ACA7-F4D4E1DC604C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{85D9BF99-3283-4B2C-A616-7239D8873318}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{86F0D4A8-69D3-4558-8D12-7855ED21AD67}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{888D2C9A-40AD-4B53-A3E4-A011CD839446}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{8FA9B34E-D2C9-4AD3-AA80-B28B5F944159}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{901F7223-FF7F-44F1-A1DD-1F34F554283D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{90568722-0514-41F3-A263-93BE74389598}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{98E62F1A-21D0-4EE4-A8DD-8990589862BE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9B34270D-634B-40CD-BCF0-8A61B4FE4671}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9C1AF5F2-9E83-42DA-BDED-C84DEFC8146D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9C3D06BC-8EFE-4827-8416-7A5C4D471717}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9D003000-380E-4098-930A-68011AB7A288}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9E861854-F4DF-4793-9C0C-21C01BEB2E05}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A0BE52BD-200C-481A-BA49-7F72100204FD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A407E219-1C79-4DC2-8E24-93BE890C6553}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A5389B18-76D9-4E4D-B54B-646A45B03454}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A64EF8A2-CDE1-44D0-ABF8-6ED6AB7948F9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A6FF36D2-E86C-46F2-9B28-F372A3E17AF1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A7B7D204-34A4-4445-8ECA-B350DC5C92A8}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AA6B97F6-BD90-441A-8DC2-79A79CD26D08}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AAACDF95-3493-4EAF-95B8-25A3229B327E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AB2CBD04-9283-4D04-87A7-129CD547BBF2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AC278B62-750A-4C95-AA01-06FAB7A77A04}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AC4141AA-852A-4A89-AFCA-F990B7DE2BE0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD301929-AE1F-4336-BDF6-5A4FCF49CEF9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD58F032-7B86-4A9E-8BA0-BD25459F4039}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD61DEA2-B93F-4B38-BB24-9E7E741084B5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AF6A4FE8-2FE5-49A3-93A2-2311445EF813}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B1AA74BA-10D3-4EF5-BC84-981D29F0C482}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B1E047D8-957E-4A2F-9A7F-0FFA91590DD5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B56826EC-0136-444F-B904-D367BF9D4DC0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B9C143B5-77E1-432C-A140-549E3E7EE45E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BAC7B418-C095-4009-8961-319BF4770A84}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BCA79187-D5E3-4B27-A1B1-E49682BE2261}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BDF73334-2AAC-4BA3-B300-D697208FAA09}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BF2B30FB-74F0-4EAB-990C-DB969E2D102D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BF558479-8903-4D71-B9B7-4F3DA946935E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BFF8A5CF-05A3-4013-BCB4-72714A4EBDF9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C0525946-5544-4EA0-91E7-D1DD1DAFC106}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C3DD5740-105A-4C39-8945-9C4C8488F344}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C5E58A49-2793-44F9-9103-88A87A2BEA57}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C84EFEB0-AB4E-496E-9405-A89E2F600FB1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C9ADF44C-9934-4466-8FC8-05BD30B46B49}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CBC54114-94EF-4F06-B16D-5FC0A1F4D010}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CD1F6EC7-F6F6-45D5-B4BE-3EC2FEFE4F62}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CDCB7C17-3E68-40E2-B72C-B6BAA8578F66}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CEAEB5EF-98B6-48CE-AA8C-1DF1D86E8AAA}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CF66B99B-D017-4BB8-87E7-B25DB5DD086C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CF86CF9F-23A5-43E3-A96A-80F5EBCE6503}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D0A694E0-2647-4368-9843-244D27D13B46}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D205F64C-EDEB-42D7-B414-38C19420D82B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D25703E6-EC0C-402D-A190-4AF3B3883AAB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D2C8C3E9-DE22-46D4-8E05-08B48FB7C929}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D8AD9D5D-5F61-4BFE-A60C-9221D71535FF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D9BFDA9D-D091-4054-94E2-B58B64327F69}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DA1957BB-4581-40D2-AC3C-ED07E083841F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DBD8840A-D18D-45BD-89C5-0AAA461593DF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DCC281E9-8B34-4D89-A789-71D3585F31B2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E3D6DBAD-46D3-4A33-B564-C4D7A5F9E52C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E4075ACC-37C3-4565-B1E6-C95B65F369BB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E67B8CB0-3B06-4F97-9E35-5F3DAFD172D3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E84D2143-45D4-40FB-A34E-A849A576F998}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E8AC2C95-6100-4768-BC21-2123AEB76D43}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EAFB72A5-F631-4A43-800D-10AF0AC31E49}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EC2DD975-DBFF-4FFE-8BDD-493C65D02C17}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EDD13AFC-BF06-4519-9E81-EE90C54C17E5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EEC2A301-C114-45D6-8077-58A4DA1E444E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EF608B15-517F-4B2D-BCFD-CC2119255CE9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F23F9B80-755C-42A1-BF2C-007A1000C1E3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F5EF9A3E-A56B-4C2D-8B0A-B40BFE8FC4D2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F7F0DCD2-E029-4204-8C67-D5C88B088906}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F931FB14-09E4-4604-B244-FCAC169F8D01}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F960353E-3C01-4390-85C2-489C2A630719}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FA64F5D4-8BB8-4924-9EDC-86AA33A72709}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FB8CA448-3D95-4DB6-AE5C-37DE7E325F17}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FB933556-8CA7-49D7-8E37-9263CAD77779}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FBA85F44-CDB5-40F1-9538-30895B5C541A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FC55D04D-90A4-44F9-9A7C-56AE0463F7AD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FE9C1031-A83A-47BC-AD0A-A1B20E3978C3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FEB8E4AE-D2F5-4684-AA12-908825930827}

SUPPRIME Folder: C:\Program Files (x86)\FREEzeFrog

SUPPRIME Flash Cookies: 13

SUPPRIME Temporaires Windows: : 100

 

========== Fichier(s) ==========

ABSENT Folder/File: c:\users\lauriane\appdata\roaming\mozilla\firefox\profiles\0eiacw2h.default\extensions\@fissaplugin

SUPPRIME Flash Cookies: 7

SUPPRIME Temporaires Windows: : 267

 

 

========== Récapitulatif ==========

5 : Clé(s) du Registre

9 : Valeur(s) du Registre

179 : Dossier(s)

3 : Fichier(s)

 

 

End of clean in 00mn 46s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 21/10/2011 20:27:55 [17473]

 

 

 

 

Et enfin pour finir le rapport de Adwclear :

# AdwCleaner v1.312 - Rapport créé le 21/10/2011 à 20:33:00

# Mis à jour le 18/10/11 à 21h par Xplode

# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

# Nom d'utilisateur : LAURIANE - LAURIANE-PC (Droits Limités)

# Exécuté depuis : C:\Users\LAURIANE\Téléchargements\adwcleaner.exe

# Option [Recherche]

 

 

***** [Processus] *****

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Présent : C:\ProgramData\BrightBreezeSA

Dossier Présent : C:\Program Files (x86)\BrightBreeze

 

***** [Registre] *****

 

Clé Présente : HKCU\Software\brightbreezesa

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

[OK] Le registre ne contient aucune entrée illégitime.

 

-\\ Mozilla Firefox v6.0.2 (en-US)

 

Profil : 0eiacw2h.default

Fichier : C:\Users\LAURIANE\AppData\Roaming\Mozilla\Firefox\Profiles\0eiacw2h.default\prefs.js

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

-\\ Google Chrome v [impossible d'obtenir la version]

 

Fichier : C:\Users\LAURIANE\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

*************************

 

AdwCleaner[R1].txt - [2526 octets] - [21/10/2011 20:33:00]

 

########## EOF - C:\AdwCleaner[R1].txt - [2654 octets] ##########

 

 

 

 

 

Encore merci de m'aider :)

 

Merci pour votre réponse. Voici le 1ère rapport ZHPFix :

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"

"HPCam_Menu"="\"c:\\Program Files (x86)\\Hewlett-Packard\\Media\\Webcam\\MUITransfer\\MUIStartMenu.exe\" \"c:\\Program Files (x86)\\Hewlett-Packard\\Media\\Webcam\" UpdateWithCreateOnce \"Software\\Hewlett-Packard\\Media\\Webcam\""

"QlbCtrl.exe"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Quick Launch Buttons\\QlbCtrl.exe /Start"

"UpdatePRCShortCut"="\"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerRecover\""

"Easybits Recovery"="C:\\Program Files (x86)\\EasyBits For Kids\\ezRecover.exe"

"HP Software Update"="C:\\Program Files (x86)\\Hp\\HP Software Update\\HPWuSchd2.exe"

"WirelessAssistant"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Wireless Assistant\\HPWAMain.exe"

"avast5"="\"C:\\Program Files\\Alwil Software\\Avast5\\avastUI.exe\" /nogui"

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"AllShareAgent"="C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe"

"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

"iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe\" -u auto-update"

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"

"QlbCtrl.exe"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Quick Launch Buttons\\QlbCtrl.exe /Start"

"UpdatePRCShortCut"="\"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files (x86)\\Hewlett-Packard\\Recovery\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerRecover\""

"Easybits Recovery"="C:\\Program Files (x86)\\EasyBits For Kids\\ezRecover.exe"

"HP Software Update"="C:\\Program Files (x86)\\Hp\\HP Software Update\\HPWuSchd2.exe"

"WirelessAssistant"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Wireless Assistant\\HPWAMain.exe"

"avast5"="\"C:\\Program Files\\Alwil Software\\Avast5\\avastUI.exe\" /nogui"

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"AllShareAgent"="C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe"

"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

"iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe\" -u auto-update"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3]

"affid"="1000007044"

"SG_Not_Set"=dword:00000001

"bannerid"=""

"requestor"="6822815"

"cookies_flag"=dword:00000001

"iid"="0001A2E5E5296942A56D767AAC1DBF47446C8D47"

"UserCreateDate"="10/13/2011 04:43:15"

"usr_RCT"="FR"

"sendIds_success"=dword:00000001

"InstallCreateDate"=dword:4e96ced3

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3\Firefox]

"cookies_flag"=dword:00000001

"brwsr"="ff"

"sendIds_success"=dword:00000001

"CID"="10C6963E00000000000000265E857FD6DE3A3C09"

"iid"="13ABF6D3916C034CBCE72AC4BB1F2BB2E270D9B3"

"UID"="C2B0BEB298E78942985AD6C56F3B5336751B65BA"

"usr_RCT"="FR"

"usr_REGION"="j"

"usr_CITY"="boulogne-billancourt"

"usr_SPEED"="xdsl"

"usr_COUNTRY_CODE"="5"

"usr_REGION_CODE"="j"

"usr_CITY_CODE"="3"

"usr_LATITUDE"="48.835"

"usr_LONGITUDE"="2.241"

"usr_URL"=""

"usr_ZIP_CODE"=""

"usr_AREA_CODE"="0"

"usr_GMT_OFFSET"="0"

"usr_DEST"="n"

"usr_DMA"="-1"

"GetCountryTime"=dword:4e97526e

"GetCountryTimeText"="13/10/11 23:04:46"

"CfgNextTime"=dword:4e9e081c

"UserCreateDate"="10/13/2011 04:43:15"

"ServerDeltaTime"=dword:00000000

"ServerDeltaSet"=dword:00000001

"CfgPrcs"=dword:00000000

"LTAR"=dword:014f6c73

"currentResDir"="C:\\Users\\LAURIANE\\AppData\\LocalLow\\ShopperReports3\\Firefox\\cs\\res1"

"NetworkPermission"=dword:00000001

"ShoppingUrl"="http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=GeneralProduct&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"

"TravelUrl"="http://cs.ShopperReports.com/cs/cs.aspx?HBHintSVC=Travel&RequestDisableTime=$PV:ServerDisableTime$&Partner=$PARTNER$&HBCountry=$PV:usr_RCT$&CID=$PV:CID$&HBDump=$PV:HBDump$&SG=$SG$&UCD=$UCD$&BannerID=$BANNERID$&ClntVrsn=$Ver$&AffiliateID=$AFF_ID$&RequestContext=1&HBShowSearch=1&MustShowUI=1&swCoupons=$PV:USR_so-coupons$&NavigationAction=$PV:USR_openning-action$&swSE=$PV:USR_so-search-engine$&swTickets=$PV:USR_so-tickets$&swAirport=$PV:USR_airport$&swTravelers=$PV:USR_nb-travelers$&swTravel=$PV:USR_so-travel$&ss_ZipCode=$PV:usr_ZIP_CODE$&hbdump=0"

"NavmainEliminateTime"="20000"

"GuruVersion"="3.0.0.17"

"hbdump"="0"

"COptions/ShopperReports3/General/snoozeTime"="60"

"ServerDisableTime"="1318655788.2288"

 

[HKEY_CURRENT_USER\Software\AppDataLow\Software\ShopperReports3\IE]

"brwsr"="ie"

"cookies_flag"=dword:00000001

"ShowHbBand"="0"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\FissaSearch]

 

[HKEY_CURRENT_USER\Software\FissaSearch\FF]

"oldHomePage"="www.google.fr"

"oldDefaultSearchEngine"=""

 

[HKEY_CURRENT_USER\Software\FissaSearch\IE]

"oldHomePage"="http://www.duxet.com/"

"oldDefaultSearchEngine"="{15AE96E9-F094-439C-A792-51EFF23F79E9}"

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\OfferBox]

"CID"=dword:0146f5ec

"EME_prefix"="O0A24FR25N21427692"

"server_info"=""

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"SSTP-IN-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=443|App=System|[email protected],-35002|[email protected],-35003|[email protected],-35001|"

"Netlogon-NamedPipe-In"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=445|App=System|[email protected],-1003|[email protected],-1006|[email protected],-1010|"

"SNMPTRAP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=162|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\snmptrap.exe|Svc=SNMPTRAP|[email protected],-7|[email protected],-8|[email protected],-3|"

"SNMPTRAP-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=162|App=%SystemRoot%\\system32\\snmptrap.exe|Svc=SNMPTRAP|[email protected],-7|[email protected],-8|[email protected],-3|"

"WMP-In-UDP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31023|[email protected],-31006|[email protected],-31002|"

"WMP-Out-UDP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31024|[email protected],-31010|[email protected],-31002|"

"WMP-Out-TCP-x86"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31025|[email protected],-31014|[email protected],-31002|"

"WMP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31003|[email protected],-31006|[email protected],-31002|"

"WMP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31007|[email protected],-31010|[email protected],-31002|"

"WMP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31011|[email protected],-31014|[email protected],-31002|"

"WMPNSS-QWave-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"WMPNSS-QWave-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"WMPNSS-QWave-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"WMPNSS-QWave-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2177|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"WMPNSS-HTTPSTR-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=10243|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"WMPNSS-HTTPSTR-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=10243|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"WMPNSS-WMP-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"WMPNSS-WMP-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"WMPNSS-WMP-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"WMPNSS-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"WMPNSS-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"WMPNSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"WMPNSS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"WMPNSS-QWave-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"WMPNSS-QWave-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"WMPNSS-QWave-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"WMPNSS-QWave-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"WMPNSS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31269|[email protected],-31272|[email protected],-31252|"

"WMPNSS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31273|[email protected],-31276|[email protected],-31252|"

"WMPNSS-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31277|[email protected],-31280|[email protected],-31252|"

"WMPNSS-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31281|[email protected],-31284|[email protected],-31252|"

"WMPNSS-HTTPSTR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"WMPNSS-HTTPSTR-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"WMPNSS-WMP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"WMPNSS-WMP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"WMPNSS-WMP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"WMPNSS-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"WMPNSS-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"WMPNSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"WMPNSS-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"WMPNSS-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-31321|[email protected],-31322|[email protected],-31252|"

"WMPNSS-RME-HTTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=10245|App=System|[email protected],-31501|[email protected],-31502|[email protected],-31500|Edge=TRUE|Defer=App|"

"Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=p2psvc|Name=@%systemroot%\\system32\\provsvc.dll,-200|Desc=@%systemroot%\\system32\\provsvc.dll,-201|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=p2psvc|Name=@%systemroot%\\system32\\provsvc.dll,-203|Desc=@%systemroot%\\system32\\provsvc.dll,-204|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\\system32\\provsvc.dll,-205|Desc=@%systemroot%\\system32\\provsvc.dll,-206|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\\system32\\provsvc.dll,-207|Desc=@%systemroot%\\system32\\provsvc.dll,-208|EmbedCtxt=@%systemroot%\\system32\\provsvc.dll,-202|"

"PNRPMNRS-PNRP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-34003|[email protected],-34004|[email protected],-34002|Edge=TRUE|Defer=App|"

"PNRPMNRS-PNRP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-34005|[email protected],-34006|[email protected],-34002|"

"PNRPMNRS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-34007|[email protected],-34008|[email protected],-34002|"

"PNRPMNRS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-34009|[email protected],-34010|[email protected],-34002|"

"RVM-VDS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\vds.exe|Svc=vds|[email protected],-34502|[email protected],-34503|[email protected],-34501|"

"RVM-VDSLDR-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\vdsldr.exe|[email protected],-34504|[email protected],-34505|[email protected],-34501|"

"RVM-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-34506|[email protected],-34507|[email protected],-34501|"

"RVM-VDS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\vds.exe|Svc=vds|[email protected],-34502|[email protected],-34503|[email protected],-34501|"

"RVM-VDSLDR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\vdsldr.exe|[email protected],-34504|[email protected],-34505|[email protected],-34501|"

"RVM-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-34506|[email protected],-34507|[email protected],-34501|"

"Collab-P2PHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32003|[email protected],-32006|[email protected],-32002|Edge=TRUE|Defer=App|"

"Collab-P2PHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32007|[email protected],-32010|[email protected],-32002|"

"Collab-P2PHost-WSD-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32011|[email protected],-32014|[email protected],-32002|"

"Collab-P2PHost-WSD-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\p2phost.exe|[email protected],-32015|[email protected],-32018|[email protected],-32002|"

"Collab-PNRP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-32019|[email protected],-32022|[email protected],-32002|Edge=TRUE|Defer=App|"

"Collab-PNRP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\\system32\\svchost.exe|Svc=PNRPSvc|[email protected],-32023|[email protected],-32026|[email protected],-32002|"

"Collab-PNRP-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32027|[email protected],-32030|[email protected],-32002|"

"Collab-PNRP-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32031|[email protected],-32034|[email protected],-32002|"

"FPS-NB_Session-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"FPS-NB_Session-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"FPS-SMB-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"FPS-SMB-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"FPS-NB_Name-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"FPS-NB_Name-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"FPS-NB_Datagram-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"FPS-NB_Datagram-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"FPS-SpoolSvc-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"FPS-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"FPS-ICMP4-ERQ-In-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP4-ERQ-Out-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-In-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-Out-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"FPS-NB_Session-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"FPS-NB_Session-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"FPS-SMB-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"FPS-SMB-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"FPS-NB_Name-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"FPS-NB_Name-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"FPS-NB_Datagram-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"FPS-NB_Datagram-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"FPS-SpoolSvc-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"FPS-RPCSS-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"FPS-ICMP4-ERQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP4-ERQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"FPS-ICMP6-ERQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"FPS-LLMNR-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"FPS-LLMNR-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"CoreNet-ICMP6-DU-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=1:*|App=System|[email protected],-25110|[email protected],-25112|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PTB-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=2:*|App=System|[email protected],-25001|[email protected],-25007|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PTB-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=2:*|[email protected],-25002|[email protected],-25007|[email protected],-25000|"

"CoreNet-ICMP6-TE-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=3:*|App=System|[email protected],-25113|[email protected],-25115|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-TE-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=3:*|[email protected],-25114|[email protected],-25115|[email protected],-25000|"

"CoreNet-ICMP6-PP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=4:*|App=System|[email protected],-25116|[email protected],-25118|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-PP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=4:*|[email protected],-25117|[email protected],-25118|[email protected],-25000|"

"CoreNet-ICMP6-NDS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=135:*|App=System|[email protected],-25019|[email protected],-25025|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-NDS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=135:*|[email protected],-25020|[email protected],-25025|[email protected],-25000|"

"CoreNet-ICMP6-NDA-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|[email protected],-25026|[email protected],-25032|[email protected],-25000|Edge=TRUE|"

"CoreNet-ICMP6-NDA-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=136:*|[email protected],-25027|[email protected],-25032|[email protected],-25000|"

"CoreNet-ICMP6-RA-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=134:*|RA6=fe80::/64|App=System|[email protected],-25012|[email protected],-25018|[email protected],-25000|"

"CoreNet-ICMP6-RA-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|[email protected],-25013|[email protected],-25018|[email protected],-25000|"

"CoreNet-ICMP6-RS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=133:*|App=System|[email protected],-25009|[email protected],-25011|[email protected],-25000|"

"CoreNet-ICMP6-RS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=133:*|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::2|[email protected],-25008|[email protected],-25011|[email protected],-25000|"

"CoreNet-ICMP6-LQ-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|App=System|[email protected],-25061|[email protected],-25067|[email protected],-25000|"

"CoreNet-ICMP6-LQ-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|[email protected],-25062|[email protected],-25067|[email protected],-25000|"

"CoreNet-ICMP6-LR-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|App=System|[email protected],-25068|[email protected],-25074|[email protected],-25000|"

"CoreNet-ICMP6-LR-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|[email protected],-25069|[email protected],-25074|[email protected],-25000|"

"CoreNet-ICMP6-LR2-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|App=System|[email protected],-25075|[email protected],-25081|[email protected],-25000|"

"CoreNet-ICMP6-LR2-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|[email protected],-25076|[email protected],-25081|[email protected],-25000|"

"CoreNet-ICMP6-LD-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|App=System|[email protected],-25082|[email protected],-25088|[email protected],-25000|"

"CoreNet-ICMP6-LD-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|[email protected],-25083|[email protected],-25088|[email protected],-25000|"

"CoreNet-ICMP4-DUFRAG-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|ICMP4=3:4|App=System|[email protected],-25251|[email protected],-25257|[email protected],-25000|"

"CoreNet-IGMP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=2|App=System|[email protected],-25376|[email protected],-25382|[email protected],-25000|"

"CoreNet-IGMP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|[email protected],-25377|[email protected],-25382|[email protected],-25000|"

"CoreNet-DHCP-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25301|[email protected],-25303|[email protected],-25000|"

"CoreNet-DHCP-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25302|[email protected],-25303|[email protected],-25000|"

"CoreNet-DHCPV6-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25304|[email protected],-25306|[email protected],-25000|"

"CoreNet-DHCPV6-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\\system32\\svchost.exe|Svc=dhcp|[email protected],-25305|[email protected],-25306|[email protected],-25000|"

"CoreNet-Teredo-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=Teredo|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25326|[email protected],-25332|[email protected],-25000|"

"CoreNet-Teredo-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25327|[email protected],-25333|[email protected],-25000|"

"CoreNet-IPHTTPS-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort2_10=IPTLSIn|LPort2_10=IPHTTPSIn|App=System|[email protected],-25426|[email protected],-25428|[email protected],-25000|"

"CoreNet-IPHTTPS-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\\system32\\svchost.exe|Svc=iphlpsvc|[email protected],-25427|[email protected],-25429|[email protected],-25000|"

"CoreNet-IPv6-In"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=41|App=System|[email protected],-25351|[email protected],-25357|[email protected],-25000|"

"CoreNet-IPv6-Out"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|App=System|[email protected],-25352|[email protected],-25358|[email protected],-25000|"

"CoreNet-GP-NP-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|[email protected],-25401|[email protected],-25401|[email protected],-25000|"

"CoreNet-GP-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|[email protected],-25403|[email protected],-25404|[email protected],-25000|"

"CoreNet-DNS-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|RPort=53|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-25405|[email protected],-25406|[email protected],-25000|"

"CoreNet-GP-LSASS-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\lsass.exe|[email protected],-25407|[email protected],-25408|[email protected],-25000|"

"PerfLogsAlerts-PLASrv-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\plasrv.exe|[email protected],-34753|[email protected],-34754|[email protected],-34752|"

"PerfLogsAlerts-DCOM-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34755|[email protected],-34756|[email protected],-34752|"

"PerfLogsAlerts-PLASrv-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\\system32\\plasrv.exe|[email protected],-34753|[email protected],-34754|[email protected],-34752|"

"PerfLogsAlerts-DCOM-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%systemroot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34755|[email protected],-34756|[email protected],-34752|"

"MsiScsi-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29003|[email protected],-29006|[email protected],-29002|"

"MsiScsi-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29007|[email protected],-29010|[email protected],-29002|"

"MsiScsi-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29003|[email protected],-29006|[email protected],-29002|"

"MsiScsi-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Msiscsi|[email protected],-29007|[email protected],-29010|[email protected],-29002|"

"WMI-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34252|[email protected],-34253|[email protected],-34251|"

"WMI-WINMGMT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34254|[email protected],-34255|[email protected],-34251|"

"WMI-WINMGMT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34258|[email protected],-34259|[email protected],-34251|"

"WMI-ASYNC-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\\system32\\wbem\\unsecapp.exe|[email protected],-34256|[email protected],-34257|[email protected],-34251|"

"WMI-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-34252|[email protected],-34253|[email protected],-34251|"

"WMI-WINMGMT-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34254|[email protected],-34255|[email protected],-34251|"

"WMI-WINMGMT-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=winmgmt|[email protected],-34258|[email protected],-34259|[email protected],-34251|"

"WMI-ASYNC-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\\system32\\wbem\\unsecapp.exe|[email protected],-34256|[email protected],-34257|[email protected],-34251|"

"RRAS-GRE-In"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=47|App=System|[email protected],-33769|[email protected],-33772|[email protected],-33752|"

"RRAS-GRE-Out"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=47|App=System|[email protected],-33773|[email protected],-33776|[email protected],-33752|"

"RRAS-L2TP-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1701|App=System|[email protected],-33753|[email protected],-33756|[email protected],-33752|"

"RRAS-L2TP-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1701|App=System|[email protected],-33757|[email protected],-33760|[email protected],-33752|"

"RRAS-PPTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=1723|App=System|[email protected],-33765|[email protected],-33768|[email protected],-33752|"

"RRAS-PPTP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=1723|App=System|[email protected],-33761|[email protected],-33764|[email protected],-33752|"

"NETDIS-UPnPHost-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"NETDIS-SSDPSrv-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"NETDIS-SSDPSrv-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"NETDIS-UPnPHost-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-UPnP-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-FDPHOST-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"NETDIS-FDPHOST-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"NETDIS-LLMNR-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"NETDIS-LLMNR-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"NETDIS-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"NETDIS-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"NETDIS-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"NETDIS-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32761|[email protected],-32764|[email protected],-32752|"

"NETDIS-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32765|[email protected],-32768|[email protected],-32752|"

"NETDIS-NB_Name-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32769|[email protected],-32772|[email protected],-32752|"

"NETDIS-NB_Name-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32773|[email protected],-32776|[email protected],-32752|"

"NETDIS-NB_Datagram-In-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32777|[email protected],-32780|[email protected],-32752|"

"NETDIS-NB_Datagram-Out-UDP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32781|[email protected],-32784|[email protected],-32752|"

"NETDIS-FDPHOST-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"NETDIS-FDPHOST-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"NETDIS-LLMNR-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"NETDIS-LLMNR-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"NETDIS-FDRESPUB-WSD-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"NETDIS-WSDEVNTS-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32813|[email protected],-32814|[email protected],-32752|"

"NETDIS-WSDEVNTS-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32815|[email protected],-32816|[email protected],-32752|"

"NETDIS-WSDEVNT-In-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32817|[email protected],-32818|[email protected],-32752|"

"NETDIS-WSDEVNT-Out-TCP"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-32819|[email protected],-32820|[email protected],-32752|"

"RemoteSvcAdmin-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\services.exe|[email protected],-29503|[email protected],-29506|[email protected],-29502|"

"RemoteSvcAdmin-NP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-29507|[email protected],-29510|[email protected],-29502|"

"RemoteSvcAdmin-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29515|[email protected],-29518|[email protected],-29502|"

"RemoteSvcAdmin-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\services.exe|[email protected],-29503|[email protected],-29506|[email protected],-29502|"

"RemoteSvcAdmin-NP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-29507|[email protected],-29510|[email protected],-29502|"

"RemoteSvcAdmin-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29515|[email protected],-29518|[email protected],-29502|"

"RemoteTask-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=schedule|[email protected],-33253|[email protected],-33256|[email protected],-33252|"

"RemoteTask-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33257|[email protected],-33260|[email protected],-33252|"

"RemoteTask-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=schedule|[email protected],-33253|[email protected],-33256|[email protected],-33252|"

"RemoteTask-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33257|[email protected],-33260|[email protected],-33252|"

"MSDTC-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33503|[email protected],-33506|[email protected],-33502|"

"MSDTC-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33507|[email protected],-33510|[email protected],-33502|"

"MSDTC-KTMRM-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=ktmrm|[email protected],-33511|[email protected],-33512|[email protected],-33502|"

"MSDTC-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33513|[email protected],-33514|[email protected],-33502|"

"MSDTC-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33503|[email protected],-33506|[email protected],-33502|"

"MSDTC-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\msdtc.exe|[email protected],-33507|[email protected],-33510|[email protected],-33502|"

"MSDTC-KTMRM-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ktmrm|[email protected],-33511|[email protected],-33512|[email protected],-33502|"

"MSDTC-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-33513|[email protected],-33514|[email protected],-33502|"

"RemoteEventLogSvc-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=Eventlog|[email protected],-29253|[email protected],-29256|[email protected],-29252|"

"RemoteEventLogSvc-NP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|[email protected],-29257|[email protected],-29260|[email protected],-29252|"

"RemoteEventLogSvc-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29265|[email protected],-29268|[email protected],-29252|"

"RemoteEventLogSvc-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Eventlog|[email protected],-29253|[email protected],-29256|[email protected],-29252|"

"RemoteEventLogSvc-NP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-29257|[email protected],-29260|[email protected],-29252|"

"RemoteEventLogSvc-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-29265|[email protected],-29268|[email protected],-29252|"

"WINRM-HTTP-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5985|App=System|[email protected],-30253|[email protected],-30256|[email protected],-30252|"

"WINRM-HTTP-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5985|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30253|[email protected],-30256|[email protected],-30252|"

"WINRM-HTTP-Compat-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=80|App=System|[email protected],-35001|[email protected],-35002|[email protected],-30252|"

"WINRM-HTTP-Compat-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=80|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-35001|[email protected],-35002|[email protected],-30252|"

"RemoteFwAdmin-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\\system32\\svchost.exe|Svc=policyagent|[email protected],-30003|[email protected],-30006|[email protected],-30002|"

"RemoteFwAdmin-RPCSS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-30007|[email protected],-30010|[email protected],-30002|"

"RemoteFwAdmin-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=policyagent|[email protected],-30003|[email protected],-30006|[email protected],-30002|"

"RemoteFwAdmin-RPCSS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=RPCSS|[email protected],-30007|[email protected],-30010|[email protected],-30002|"

"RemoteAssistance-In-TCP-EdgeScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33003|[email protected],-33006|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33007|[email protected],-33010|[email protected],-33002|"

"RemoteAssistance-PnrpSvc-UDP-In-EdgeScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=3540|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33039|[email protected],-33040|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-PnrpSvc-UDP-OUT"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33037|[email protected],-33038|[email protected],-33002|"

"RemoteAssistance-RAServer-In-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\raserver.exe|[email protected],-33011|[email protected],-33014|[email protected],-33002|"

"RemoteAssistance-RAServer-Out-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\raserver.exe|[email protected],-33015|[email protected],-33018|[email protected],-33002|"

"RemoteAssistance-DCOM-In-TCP-NoScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\\system32\\svchost.exe|Svc=rpcss|[email protected],-33035|[email protected],-33036|[email protected],-33002|"

"RemoteAssistance-In-TCP-EdgeScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33003|[email protected],-33006|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\\system32\\msra.exe|[email protected],-33007|[email protected],-33010|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-In-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33019|[email protected],-33022|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-Out-UDP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33023|[email protected],-33026|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-In-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33027|[email protected],-33030|[email protected],-33002|"

"RemoteAssistance-SSDPSrv-Out-TCP-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-33031|[email protected],-33034|[email protected],-33002|"

"RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=3540|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33039|[email protected],-33040|[email protected],-33002|Edge=TRUE|Defer=App|"

"RemoteAssistance-PnrpSvc-UDP-OUT-Active"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|App=%systemroot%\\system32\\svchost.exe|Svc=pnrpsvc|[email protected],-33037|[email protected],-33038|[email protected],-33002|"

"WPDMTP-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\\system32\\wudfhost.exe|[email protected],-30503|[email protected],-30506|[email protected],-30502|"

"WPDMTP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\wudfhost.exe|[email protected],-30503|[email protected],-30506|[email protected],-30502|"

"WPDMTP-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30507|[email protected],-30510|[email protected],-30502|"

"WPDMTP-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30511|[email protected],-30514|[email protected],-30502|"

"WPDMTP-UPnPHost-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30515|[email protected],-30518|[email protected],-30502|"

"WPDMTP-UPnPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-30519|[email protected],-30522|[email protected],-30502|"

"WPDMTP-UPnP-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-30523|[email protected],-30524|[email protected],-30502|"

"{5E1CC901-B7C4-4393-AE3A-0C376D71CE52}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\ONENOTE.EXE|Name=Microsoft Office OneNote|"

"{A05D3340-8797-460A-98B1-08250B1C74E8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\ONENOTE.EXE|Name=Microsoft Office OneNote|"

"{1B1E1807-19BC-4933-A75C-9D73C24FD341}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\CyberLink\\PowerDirector\\PDR.EXE|Name=CyberLink PowerDirector|Desc=CyberLink PowerDirector|"

"NetPres-WSDEVNT-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|[email protected],-31769|[email protected],-31770|[email protected],-31752|"

"NetPres-WSDEVNT-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|[email protected],-31771|[email protected],-31772|[email protected],-31752|"

"NetPres-WSDEVNTS-In-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|[email protected],-31773|[email protected],-31774|[email protected],-31752|"

"NetPres-WSDEVNTS-Out-TCP-NoScope"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|[email protected],-31775|[email protected],-31776|[email protected],-31752|"

"NetPres-WSDEVNT-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31769|[email protected],-31770|[email protected],-31752|"

"NetPres-WSDEVNT-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31771|[email protected],-31772|[email protected],-31752|"

"NetPres-WSDEVNTS-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31773|[email protected],-31774|[email protected],-31752|"

"NetPres-WSDEVNTS-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31775|[email protected],-31776|[email protected],-31752|"

"MCX-SSDPSrv-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30753|[email protected],-30756|[email protected],-30752|"

"MCX-SSDPSrv-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30757|[email protected],-30760|[email protected],-30752|"

"MCX-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=554|LPort=8554|LPort=8555|LPort=8556|LPort=8557|LPort=8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30761|[email protected],-30764|[email protected],-30752|"

"MCX-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30765|[email protected],-30768|[email protected],-30752|"

"MCX-QWave-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30769|[email protected],-30772|[email protected],-30752|"

"MCX-QWave-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30773|[email protected],-30776|[email protected],-30752|"

"MCX-QWave-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30777|[email protected],-30780|[email protected],-30752|"

"MCX-QWave-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-30781|[email protected],-30784|[email protected],-30752|"

"MCX-HTTPSTR-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=10244|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30785|[email protected],-30788|[email protected],-30752|"

"MCX-TERMSRV-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3390|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30793|[email protected],-30796|[email protected],-30752|"

"MCX-In-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=7777|LPort=7778|LPort=7779|LPort=7780|LPort=7781|LPort=5004|LPort=5005|LPort=50004|LPort=50005|LPort=50006|LPort=50007|LPort=50008|LPort=50009|LPort=50010|LPort=50011|LPort=50012|LPort=50013|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30801|[email protected],-30804|[email protected],-30752|"

"MCX-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\ehome\\ehshell.exe|[email protected],-30805|[email protected],-30808|[email protected],-30752|"

"MCX-MCX2SVC-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=mcx2svc|[email protected],-30810|[email protected],-30811|[email protected],-30752|"

"MCX-Prov-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\ehome\\mcx2prov.exe|[email protected],-30812|[email protected],-30813|[email protected],-30752|"

"MCX-PlayTo-In-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-30814|[email protected],-30815|[email protected],-30752|"

"MCX-PlayTo-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-30816|[email protected],-30817|[email protected],-30752|"

"MCX-McrMgr-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\\ehome\\mcrmgr.exe|[email protected],-30818|[email protected],-30819|[email protected],-30752|"

"MCX-PlayTo-Out-UDP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-30820|[email protected],-30821|[email protected],-30752|"

"MCX-FDPHost-Out-TCP"="v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-30822|[email protected],-30823|[email protected],-30752|"

"{3620E56F-9E40-42DB-AAD0-B60E9D531507}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\Media\\DVD\\HPDVDSmart.exe|Name=HP MediaSmart DVD|Desc=HP MediaSmart DVD|"

"{4C4B2AA7-9EA1-4DD4-A629-B824705C94C6}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartMusic.exe|Name=HP TouchSmart Music|Desc=HP TouchSmart Music|"

"{D0D54151-D63B-4AD0-A818-4B66C363104F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartPhoto.exe|Name=HP TouchSmart Photo|Desc=HP TouchSmart Photo|"

"{41F33EDC-46E1-45AE-9465-D33799BDF3D2}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\HPTouchSmartVideo.exe|Name=HP TouchSmart Video|Desc=HP TouchSmart Video|"

"{900EA1C9-AF2F-44F9-A9C7-F52483056C8C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\TSMAgent.exe|Name=HP TouchSmart Media Resident Program|Desc=HP TouchSmart Media Resident Program|"

"{2C65663C-73F5-4C08-A8DF-363B3B5E76FB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=c:\\Program Files (x86)\\Hewlett-Packard\\TouchSmart\\Media\\Kernel\\CLML\\CLMLSvc.exe|Name=CyberLink Media Service|Desc=CyberLink Media Service|"

"{0DECAADB-4EF5-48A1-A026-68FAC8F6DC2E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=6004|App=C:\\Program Files (x86)\\Microsoft Office\\Office12\\outlook.exe|Name=Microsoft Office Outlook|"

"{B8465D37-9C6E-4A8C-908E-536CD93F62A5}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31011|[email protected],-31014|[email protected],-31002|"

"{EFC91097-870D-458F-917F-7B6BCD4F9D45}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31007|[email protected],-31010|[email protected],-31002|"

"{659B3079-BFCE-48AB-8D34-45FEC96919C1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles%\\Windows Media Player\\wmplayer.exe|[email protected],-31003|[email protected],-31006|[email protected],-31002|"

"{EA77B596-BB20-4861-B78E-7809DDEBBE03}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31025|[email protected],-31014|[email protected],-31002|"

"{EDB01610-12CF-4B33-ADEA-44A7C532FFFD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31024|[email protected],-31010|[email protected],-31002|"

"{0EF7C12F-2677-4108-B3BD-8C2E70C39287}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe|[email protected],-31023|[email protected],-31006|[email protected],-31002|"

"{9A398D9E-37DF-4C4E-90FD-61DE2F7B377A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-31321|[email protected],-31322|[email protected],-31252|"

"{E17C5EDA-F376-4D5D-96F1-CD692C56AAFD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31317|[email protected],-31320|[email protected],-31252|"

"{5B51C6B3-A186-4D60-B383-2EDF45E57078}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31313|[email protected],-31316|[email protected],-31252|"

"{25C17D92-6E53-4ACD-8042-C686015979CD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31309|[email protected],-31312|[email protected],-31252|"

"{E94202B0-80A7-4A50-AB8B-C3D04E26D892}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmpnetwk.exe|[email protected],-31305|[email protected],-31308|[email protected],-31252|"

"{77931C09-7F09-4D9B-BFBE-46FED033719D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31301|[email protected],-31304|[email protected],-31252|"

"{F35B2CD1-5A1A-4B29-B02B-5C2299A121A3}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31297|[email protected],-31300|[email protected],-31252|"

"{BC6C4697-2334-4582-A0B6-642E2E8B352D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\\Windows Media Player\\wmplayer.exe|[email protected],-31293|[email protected],-31296|[email protected],-31252|"

"{D1D5AA08-7765-4550-94B1-24FEFE099863}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31289|[email protected],-31292|[email protected],-31252|"

"{7D30A0D5-BA19-4360-9779-FC4CC0987A2C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31285|[email protected],-31288|[email protected],-31252|"

"{E0B84E65-77F0-4EC3-B652-4CC7E66B8773}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31281|[email protected],-31284|[email protected],-31252|"

"{96F6962A-9977-4BD1-BF7D-E0FBA6859659}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-31277|[email protected],-31280|[email protected],-31252|"

"{29C6B1DD-625F-4472-A597-E40B8A5EB569}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31273|[email protected],-31276|[email protected],-31252|"

"{0E106C62-AD90-48E7-AD6C-5C2F984AFEF4}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=ssdpsrv|[email protected],-31269|[email protected],-31272|[email protected],-31252|"

"{1EEED7E3-C3C3-4C82-A65C-330E6D58D1FE}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31265|[email protected],-31268|[email protected],-31252|"

"{FF4356D4-9E2B-4249-91ED-B9AF1F3B30DB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31261|[email protected],-31264|[email protected],-31252|"

"{6309F8EA-A599-4559-A596-CDB22A3F4124}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31257|[email protected],-31260|[email protected],-31252|"

"{7C6F662E-453E-4FED-9F1C-CC526DF2211B}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Qwave|[email protected],-31253|[email protected],-31256|[email protected],-31252|"

"{FFC8913E-1D67-465A-947C-6E3B56A1C556}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"{D158FBF2-8F30-45F1-8946-E4501B25305F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"{3CD89A8E-812F-413D-8016-F6240F157B0E}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28546|[email protected],-28547|[email protected],-28502|"

"{B9B08ABA-DECC-437E-B794-3C2C692F160E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|[email protected],-28545|[email protected],-28547|[email protected],-28502|"

"{D8857BA5-9284-454B-B346-8FE073C580FD}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28544|[email protected],-28547|[email protected],-28502|"

"{9527BED0-B460-4671-946C-5A084AEEE901}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|[email protected],-28543|[email protected],-28547|[email protected],-28502|"

"{E9101852-2FEA-41EA-BCA6-D0F9EA52573F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|[email protected],-28539|[email protected],-28542|[email protected],-28502|"

"{E2F4D0EB-481E-4B55-B773-F4E65ED2C311}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\spoolsv.exe|Svc=Spooler|[email protected],-28535|[email protected],-28538|[email protected],-28502|"

"{1506D210-8430-49DB-9E6C-02729F2D2F8B}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28531|[email protected],-28534|[email protected],-28502|"

"{B25EA4E0-88D7-4141-A809-72E84D037DB8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28527|[email protected],-28530|[email protected],-28502|"

"{459DC623-B572-48B8-9BDB-AD1AD27F2773}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28523|[email protected],-28526|[email protected],-28502|"

"{B0A2C8D1-A095-4636-8A60-405D6D6E49F4}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28519|[email protected],-28522|[email protected],-28502|"

"{1C318198-7FF6-48B2-92D7-5AFA947B4D22}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28515|[email protected],-28518|[email protected],-28502|"

"{0C134D3A-7348-412B-9E8A-86D3E9E03E27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28511|[email protected],-28514|[email protected],-28502|"

"{96F9FAA3-BFCC-4177-9373-807602A677EA}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28507|[email protected],-28510|[email protected],-28502|"

"{236E300F-C8BD-4322-A8C5-3C0E75C76F3D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|[email protected],-28503|[email protected],-28506|[email protected],-28502|"

"{33CB8B90-A2EE-42C8-B648-BA8A57C6206A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28550|[email protected],-28551|[email protected],-28502|"

"{15052965-7A20-4481-AC94-A09D299BA610}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-28548|[email protected],-28549|[email protected],-28502|"

"{9621A5C2-D464-4724-8106-3B58C6E26774}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Messenger\\msnmsgr.exe|Name=Windows Live Messenger|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|Edge=TRUE|"

"{9F295257-B584-4C73-91AF-72B3218EEB2F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=Windows Live Messenger (UPnP-In)|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|"

"{38DB2E02-624A-4EDE-A99B-10FAE2EBE81C}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=svchost.exe|Svc=ssdpsrv|Name=Windows Live Messenger (SSDP-In)|EmbedCtxt=@C:\\Program Files (x86)\\Windows Live\\Messenger\\msgsres.dll,-4200|"

"TCP Query User{4F54F30D-F248-40CC-8206-266A273D4538}C:\\program files (x86)\\mozilla firefox\\firefox.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\program files (x86)\\mozilla firefox\\firefox.exe|Name=Firefox|Desc=Firefox|Defer=User|"

"UDP Query User{6F832398-70CB-4E60-81D4-E3370F8C2372}C:\\program files (x86)\\mozilla firefox\\firefox.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\program files (x86)\\mozilla firefox\\firefox.exe|Name=Firefox|Desc=Firefox|Defer=User|"

"{213862A0-7D05-444E-8775-6A9B95EA7A14}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Contacts\\wlcomm.exe|Name=Windows Live Communications Platform|Edge=TRUE|"

"{E45711AC-32B0-4E37-91DE-897C716F3981}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (UPnP)|"

"{0FD93363-E35A-496B-A1C0-CA865C7CFFCE}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (SSDP)|"

"{FEB23F57-8BF1-4C71-B5F7-0D869E98FB22}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{2EA4ACBD-2575-4D52-8FED-1E1AC077EBA1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{047EDC01-14C2-45A5-BF0E-644998CC00FF}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32811|[email protected],-32812|[email protected],-32752|"

"{CF8C6941-00CE-4F11-9475-64EDAB6106EF}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdrespub|[email protected],-32809|[email protected],-32810|[email protected],-32752|"

"{D87CECA8-FDCD-4A59-91E6-30D36E1E317D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32805|[email protected],-32808|[email protected],-32752|"

"{9D122FD2-4A87-48DC-B095-2A2E2A055DE1}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=dnscache|[email protected],-32801|[email protected],-32804|[email protected],-32752|"

"{2EFFF649-018E-4817-80A9-0655A51261BB}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32789|[email protected],-32792|[email protected],-32752|"

"{B52442C3-FFB6-4DBD-BA2F-FD2A5E0BB646}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=fdphost|[email protected],-32785|[email protected],-32788|[email protected],-32752|"

"{2364FFFD-A078-4FC6-9967-D6B02644502D}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=upnphost|[email protected],-32821|[email protected],-32822|[email protected],-32752|"

"{FDB4323E-B151-4E14-85E2-B0E58ED2066A}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32757|[email protected],-32760|[email protected],-32752|"

"{BB96BDCF-6B9D-44C7-A77C-11BF703BA2F7}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\\system32\\svchost.exe|Svc=Ssdpsrv|[email protected],-32753|[email protected],-32756|[email protected],-32752|"

"{5368CCD6-1167-45FE-95C3-F6CD9901217F}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Windows Live\\Mesh\\MOE.exe|Name=Windows Live Mesh|Edge=TRUE|"

"TCP Query User{8745D950-546D-4B0C-AA34-8C69C1050543}F:\\empires2.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=F:\\empires2.exe|Name=Age of Empires II|Desc=Age of Empires II|Defer=User|"

"UDP Query User{CE8C498C-E24E-410B-819F-58835B0B0891}F:\\empires2.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=F:\\empires2.exe|Name=Age of Empires II|Desc=Age of Empires II|Defer=User|"

"TCP Query User{9DB259F4-4631-4344-A40A-53BC48A0376A}F:\\age2_exp.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|Profile=Public|App=F:\\age2_exp.exe|Name=Age of Empires II Expansion|Desc=Age of Empires II Expansion|Defer=User|"

"UDP Query User{BCA06DB4-5FA2-43C1-B750-B4C96EC07CC5}F:\\age2_exp.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|Profile=Public|App=F:\\age2_exp.exe|Name=Age of Empires II Expansion|Desc=Age of Empires II Expansion|Defer=User|"

"{939C60F3-983E-4B9D-B8DF-B48A2A0C1290}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe|Name=WebKit|Edge=TRUE|"

"{472E43B6-B88F-4C49-A3A7-108EAC9A8129}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"{3D8537EB-FCD9-4187-B612-A52B59680BAA}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Windows\\SysWOW64\\muzapp.exe|Name=MUZ AOD APP player|"

"TCP Query User{538B4EA5-FB1B-4119-8307-97388A34E180}C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe|Name=Java Platform SE binary|Desc=Java Platform SE binary|Defer=User|"

"UDP Query User{D885DCC0-DC2A-4548-86B8-8A9517DE53B7}C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe|Name=Java Platform SE binary|Desc=Java Platform SE binary|Defer=User|"

"{89BE5CAA-5D8F-4863-A39D-D08E22EEBE5E}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareDMS\\AllShareDMS.exe|Name=Samsung AllShare Service|"

"{16277207-5A21-4280-BAFD-EBFF16E6BAC2}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShare.exe|Name=Samsung AllShare Player|"

"{F97E3A71-1B1C-47FB-936C-DADE2D78E121}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\Samsung\\AllShare\\AllShareAgent.exe|Name=Samsung AllShare Agent|"

"{ACD0A677-09F1-479B-BF87-CB537FA64955}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=54010|Name=Samsung AllShare SlideShow Service|"

"{F393C4FA-CE5C-406F-B585-996E88320AAD}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{A77E16BD-11A4-4873-B877-BA94EC070FC5}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{9DA5F059-CFA7-4149-8F60-FDC1E44D183D}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\\Program Files (x86)\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{4BD8E1ED-0BFD-4F2D-A30C-37750580DAD0}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\\Program Files (x86)\\Bonjour\\mDNSResponder.exe|Name=Service Bonjour|"

"{007E72EF-F2DC-48E6-93FB-A8A1F2A33F11}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\iTunes\\iTunes.exe|Name=iTunes|Edge=TRUE|"

"{9B2E0213-5C88-4DDE-806D-242AAF23AEF6}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=48113|RA4=LocalSubnet|RA6=LocalSubnet|Name=maconfig_tcp|"

"{D98E06B3-1268-4BE5-8041-3420152A6F18}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=48113|RA4=LocalSubnet|RA6=LocalSubnet|Name=maconfig_udp|"

"{F223B950-8F03-459D-81ED-92855E4F2807}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\\Program Files (x86)\\ma-config.com\\maconfservice.exe|Name=maconfservice|"

"{6E165194-D9F4-4E72-8CF0-A8F5DBDA32AD}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\\Program Files (x86)\\ma-config.com\\maconfservice.exe|Name=maconfservice|"

 

 

 

Puis le 2ème :

Rapport de ZHPFix 1.12.3365 par Nicolas Coolman, Update du 18/10/2011

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-21-10-2011-20-27-55.txt

Run by LAURIANE at 21/10/2011 20:27:55

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Web site : ZHPFix Fix de rapport

 

========== Clé(s) du Registre ==========

SUPPRIME Key: HKCU\Software\AppDataLow\Software\ShopperReports3

SUPPRIME Key: HKCU\Software\FissaSearch

SUPPRIME Key: HKCU\Software\OfferBox

ABSENT Key: HKLM\Software\FREEzeFrog

ABSENT Key: HKLM\Software\OfferBox

 

========== Valeur(s) du Registre ==========

SUPPRIME RunValue: HPCam_Menu

SUPPRIME RunValue: UpdatePRCShortCut

ABSENT Valeur Standard Profile: FirewallRaz :

ABSENT Valeur Domain Profile: FirewallRaz :

SUPPRIME FirewallRaz (None) : {9F295257-B584-4C73-91AF-72B3218EEB2F}

SUPPRIME FirewallRaz (Private) : TCP Query User{8745D950-546D-4B0C-AA34-8C69C1050543}F:\empires2.exe

SUPPRIME FirewallRaz (Private) : UDP Query User{CE8C498C-E24E-410B-819F-58835B0B0891}F:\empires2.exe

SUPPRIME FirewallRaz (Public) : TCP Query User{9DB259F4-4631-4344-A40A-53BC48A0376A}F:\age2_exp.exe

SUPPRIME FirewallRaz (Public) : UDP Query User{BCA06DB4-5FA2-43C1-B750-B4C96EC07CC5}F:\age2_exp.exe

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Roaming\Mozilla\Firefox\Profiles\0eiacw2h.default\extensions\@FissaPlugin

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Roaming\OfferBox

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{011CBFED-3752-4824-B834-2A381E1D152F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{01F06593-BC16-491F-AC03-EDCB457BF654}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{02246E71-0AD5-4E1C-A135-91318C8E3B54}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0240751A-C332-4FD1-9849-1827B053F334}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{034D1A91-69B5-4A2B-95FC-4E62AF40C45C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{06D5C5E7-32DB-44D8-A15A-241980D3D7DC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{08383216-A2FC-4B39-948D-8DAFA7EC97E3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0CE1ED87-7611-481C-97B4-5EB107971F08}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{0E85D462-4DB5-468A-A965-B214C393321C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{11B84EF6-C375-48B7-8283-6E380AF020AE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{127C3CAE-202F-41DB-98E5-04921BC3F56B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{166AF781-5D30-4D30-860E-0BAE06ABFF11}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1708FCF0-FE8B-458B-A140-1EF9AA90DA3F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1889A4C7-76E5-4641-9303-099CB5D346EF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{193E3DC5-FD91-4F7F-9B61-A5C43067A196}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{19BD014A-D6C2-47B6-88AD-5BDE03CB32F0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1A3D9A6D-2A35-444B-B84F-9144E004D84B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1B3C6FED-2758-434F-8DBA-2C024852B4B3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1C3F3AEA-A921-42D9-9DC9-7F28A0892FCC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1D01AB4C-683B-47D3-8DEC-CC346593836C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{1D0EB7E3-3383-4278-8A49-C4CD2323F247}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{203B9A1F-4D91-4168-8647-C4AA979B5626}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{24E7B092-DFD1-49BA-BCC5-B4D68C86A789}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{26060EC2-8B6D-4B7B-89D6-9F8B4DD7A107}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2678CD99-4F2F-4EED-AE54-4ADC41B22E61}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{28DFAB65-A801-4952-985C-8FD4A2540DC6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{29173480-8297-4A1F-A7F4-C5B42FE41B0F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2B596831-0BA6-4CF0-93FB-229926310FE2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2B5ED52A-B368-4B6A-A646-17D72EC98D9C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2E00A8C0-C845-458D-988A-E6B826B10C90}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2E76632A-5B2E-44F4-B349-65CAE95C2667}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{2F65DD82-DC08-4EE6-A1CC-E0629C6F2EC1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{303E77C4-F83D-4ED5-B21A-B4AAE6D89324}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3313EE53-0865-4F88-B935-152E8A57D5A0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{347F970C-D77F-4D40-B8AC-F2D20F8D09CE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3552E7E3-D3F9-40FF-B09E-0FF02F8ACE94}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3741BEB1-0FEB-4268-A0F3-037C1536CD02}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{386683E5-A097-4BF3-B8FF-A979A276DA29}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3902ECA2-F9B9-472B-9DC2-9F77574A3F13}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3AE31A85-83EA-4244-A574-02962FA8D332}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3BEC5BE3-5921-4790-849D-4C235638794C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3C068413-21D2-44C8-8B92-5E1D73E8E315}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3C5EAA8F-8632-45E7-B5D8-C1053482A208}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3F558DE6-3E78-4811-B1CC-7A20A72C019A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{3FF8F030-BE20-4E82-9ADB-C25C71750A32}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{403391C6-4AD8-49B0-9B37-F331D2C802C6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{41EFFCB1-BFCD-4E70-B102-F2659586B6CC}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{42474999-7F38-4F81-9BE5-6D711BDAD9B0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{43848A0C-5EDF-45EC-B413-3AF87195E934}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{456AE172-8E0B-4AE6-BFC3-FD5D1A965FA6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{46B92F7B-4CD7-4BE0-923B-E836FB5DF853}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{47AFCFF8-FA28-44A7-AE8F-4389C618E264}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{487E019A-8191-4908-B80D-D4E85FCD1DEE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4D007350-3532-482D-BFF6-BE81B355CFAF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4D854D4F-0DF3-436D-8547-7CD4CEC6DC52}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4E3458D4-E4F4-4575-AC40-0C8E0F9D986C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4ECA9E29-E24D-42E9-A904-4774DC5BB8E9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4EFEE165-EE9D-48A6-A81C-50C03C53FA0B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4F2496C4-B670-4475-BD00-C7CE0C9394C7}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{4FC8EC96-0308-4C7C-B195-489EAB1E8BC1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5023BEEE-F0E2-4263-95B7-064CA9A0A849}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{51FD90E1-83C0-4481-A728-A43FFA41BF60}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{52DC3C7E-D85E-48A0-BADA-E1F2B31EA062}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{52FC12C3-66F7-493F-AB20-4EDAF8806DC6}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{54DE51B8-C45C-4BB7-8A05-3A18C60640FD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{555FB810-7455-4F14-828B-7994A96BC059}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{56A9BF12-2574-4B9E-8C52-586CBFBF7D8A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5A5C437C-E64D-453F-B7BA-44FC51D4DACB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5AEF4660-2AC4-4158-9A64-2DC556DBE200}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5DB254A5-9B60-4403-ACDE-C92F9BA29B72}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5E54E899-6795-4580-B310-067A9BCB6F6C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5F498BAB-60AA-49B8-BEED-796BDC03F38F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{5FBE34B7-84E5-46E6-B74E-6D1049272D91}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{632347C7-2AA0-430D-ABE5-EBB9A8D4CDB9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{64DA2D0F-0A4F-461C-B686-03662D77DEB3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{670BA414-2ECF-4524-A29B-7BE944317D3E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{698DD5DA-A64B-478B-B032-3A5381300080}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C42618B-55D5-42A0-9557-5D2C7B801C90}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C841493-550E-483D-8147-54A589A11C02}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6C9B96FA-9C0D-4F48-9AE2-6AB2BC32D01F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6D60484F-0053-4980-970C-994A9B9D2477}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6E89363D-5130-4B20-B855-16A1C32CF8E2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{6FECD3C8-B357-43A5-83A2-CC4C6C3EB422}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{71B84FEC-B3BF-46B2-B018-1254332CEB13}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{759E3A15-8573-479F-8937-63857C5D7471}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{75BC2DF8-8DED-4CC8-AA66-A48E65A18D48}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{76A66881-E724-46CF-BEDF-9E2A3D84CAFE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7834D413-4812-4C72-BBCB-3E2529860396}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7A4D7959-AF9E-4EA3-9EC2-A48C89BD485C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7B6B5CF8-D97F-42BE-AEFC-9FB476831281}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7C790B38-7C94-4DFC-A334-A80F8C067A0B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{7E460D62-41B4-4277-A49D-E5A4ADFB3B22}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{825233D4-A578-401D-9A76-58EC7716956A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{83B3257B-F0DF-40C2-A8B4-3CD0D3B03552}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{846ADFE2-184A-4098-ACA7-F4D4E1DC604C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{85D9BF99-3283-4B2C-A616-7239D8873318}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{86F0D4A8-69D3-4558-8D12-7855ED21AD67}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{888D2C9A-40AD-4B53-A3E4-A011CD839446}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{8FA9B34E-D2C9-4AD3-AA80-B28B5F944159}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{901F7223-FF7F-44F1-A1DD-1F34F554283D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{90568722-0514-41F3-A263-93BE74389598}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{98E62F1A-21D0-4EE4-A8DD-8990589862BE}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9B34270D-634B-40CD-BCF0-8A61B4FE4671}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9C1AF5F2-9E83-42DA-BDED-C84DEFC8146D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9C3D06BC-8EFE-4827-8416-7A5C4D471717}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9D003000-380E-4098-930A-68011AB7A288}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{9E861854-F4DF-4793-9C0C-21C01BEB2E05}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A0BE52BD-200C-481A-BA49-7F72100204FD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A407E219-1C79-4DC2-8E24-93BE890C6553}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A5389B18-76D9-4E4D-B54B-646A45B03454}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A64EF8A2-CDE1-44D0-ABF8-6ED6AB7948F9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A6FF36D2-E86C-46F2-9B28-F372A3E17AF1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{A7B7D204-34A4-4445-8ECA-B350DC5C92A8}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AA6B97F6-BD90-441A-8DC2-79A79CD26D08}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AAACDF95-3493-4EAF-95B8-25A3229B327E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AB2CBD04-9283-4D04-87A7-129CD547BBF2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AC278B62-750A-4C95-AA01-06FAB7A77A04}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AC4141AA-852A-4A89-AFCA-F990B7DE2BE0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD301929-AE1F-4336-BDF6-5A4FCF49CEF9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD58F032-7B86-4A9E-8BA0-BD25459F4039}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AD61DEA2-B93F-4B38-BB24-9E7E741084B5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{AF6A4FE8-2FE5-49A3-93A2-2311445EF813}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B1AA74BA-10D3-4EF5-BC84-981D29F0C482}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B1E047D8-957E-4A2F-9A7F-0FFA91590DD5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B56826EC-0136-444F-B904-D367BF9D4DC0}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{B9C143B5-77E1-432C-A140-549E3E7EE45E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BAC7B418-C095-4009-8961-319BF4770A84}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BCA79187-D5E3-4B27-A1B1-E49682BE2261}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BDF73334-2AAC-4BA3-B300-D697208FAA09}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BF2B30FB-74F0-4EAB-990C-DB969E2D102D}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BF558479-8903-4D71-B9B7-4F3DA946935E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{BFF8A5CF-05A3-4013-BCB4-72714A4EBDF9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C0525946-5544-4EA0-91E7-D1DD1DAFC106}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C3DD5740-105A-4C39-8945-9C4C8488F344}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C5E58A49-2793-44F9-9103-88A87A2BEA57}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C84EFEB0-AB4E-496E-9405-A89E2F600FB1}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{C9ADF44C-9934-4466-8FC8-05BD30B46B49}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CBC54114-94EF-4F06-B16D-5FC0A1F4D010}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CD1F6EC7-F6F6-45D5-B4BE-3EC2FEFE4F62}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CDCB7C17-3E68-40E2-B72C-B6BAA8578F66}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CEAEB5EF-98B6-48CE-AA8C-1DF1D86E8AAA}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CF66B99B-D017-4BB8-87E7-B25DB5DD086C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{CF86CF9F-23A5-43E3-A96A-80F5EBCE6503}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D0A694E0-2647-4368-9843-244D27D13B46}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D205F64C-EDEB-42D7-B414-38C19420D82B}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D25703E6-EC0C-402D-A190-4AF3B3883AAB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D2C8C3E9-DE22-46D4-8E05-08B48FB7C929}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D8AD9D5D-5F61-4BFE-A60C-9221D71535FF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{D9BFDA9D-D091-4054-94E2-B58B64327F69}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DA1957BB-4581-40D2-AC3C-ED07E083841F}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DBD8840A-D18D-45BD-89C5-0AAA461593DF}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{DCC281E9-8B34-4D89-A789-71D3585F31B2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E3D6DBAD-46D3-4A33-B564-C4D7A5F9E52C}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E4075ACC-37C3-4565-B1E6-C95B65F369BB}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E67B8CB0-3B06-4F97-9E35-5F3DAFD172D3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E84D2143-45D4-40FB-A34E-A849A576F998}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{E8AC2C95-6100-4768-BC21-2123AEB76D43}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EAFB72A5-F631-4A43-800D-10AF0AC31E49}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EC2DD975-DBFF-4FFE-8BDD-493C65D02C17}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EDD13AFC-BF06-4519-9E81-EE90C54C17E5}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EEC2A301-C114-45D6-8077-58A4DA1E444E}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{EF608B15-517F-4B2D-BCFD-CC2119255CE9}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F23F9B80-755C-42A1-BF2C-007A1000C1E3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F5EF9A3E-A56B-4C2D-8B0A-B40BFE8FC4D2}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F7F0DCD2-E029-4204-8C67-D5C88B088906}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F931FB14-09E4-4604-B244-FCAC169F8D01}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{F960353E-3C01-4390-85C2-489C2A630719}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FA64F5D4-8BB8-4924-9EDC-86AA33A72709}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FB8CA448-3D95-4DB6-AE5C-37DE7E325F17}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FB933556-8CA7-49D7-8E37-9263CAD77779}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FBA85F44-CDB5-40F1-9538-30895B5C541A}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FC55D04D-90A4-44F9-9A7C-56AE0463F7AD}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FE9C1031-A83A-47BC-AD0A-A1B20E3978C3}

SUPPRIME Folder: C:\Users\LAURIANE\AppData\Local\{FEB8E4AE-D2F5-4684-AA12-908825930827}

SUPPRIME Folder: C:\Program Files (x86)\FREEzeFrog

SUPPRIME Flash Cookies: 13

SUPPRIME Temporaires Windows: : 100

 

========== Fichier(s) ==========

ABSENT Folder/File: c:\users\lauriane\appdata\roaming\mozilla\firefox\profiles\0eiacw2h.default\extensions\@fissaplugin

SUPPRIME Flash Cookies: 7

SUPPRIME Temporaires Windows: : 267

 

 

========== Récapitulatif ==========

5 : Clé(s) du Registre

9 : Valeur(s) du Registre

179 : Dossier(s)

3 : Fichier(s)

 

 

End of clean in 00mn 46s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 21/10/2011 20:27:55 [17473]

 

 

 

 

Et enfin pour finir le rapport de Adwclear :

# AdwCleaner v1.312 - Rapport créé le 21/10/2011 à 20:33:00

# Mis à jour le 18/10/11 à 21h par Xplode

# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

# Nom d'utilisateur : LAURIANE - LAURIANE-PC (Droits Limités)

# Exécuté depuis : C:\Users\LAURIANE\Téléchargements\adwcleaner.exe

# Option [Recherche]

 

 

***** [Processus] *****

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Présent : C:\ProgramData\BrightBreezeSA

Dossier Présent : C:\Program Files (x86)\BrightBreeze

 

***** [Registre] *****

 

Clé Présente : HKCU\Software\brightbreezesa

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

[OK] Le registre ne contient aucune entrée illégitime.

 

-\\ Mozilla Firefox v6.0.2 (en-US)

 

Profil : 0eiacw2h.default

Fichier : C:\Users\LAURIANE\AppData\Roaming\Mozilla\Firefox\Profiles\0eiacw2h.default\prefs.js

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

-\\ Google Chrome v [impossible d'obtenir la version]

 

Fichier : C:\Users\LAURIANE\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

*************************

 

AdwCleaner[R1].txt - [2526 octets] - [21/10/2011 20:33:00]

 

########## EOF - C:\AdwCleaner[R1].txt - [2654 octets] ##########

 

 

 

 

 

Encore merci de m'aider :)

Lien vers le commentaire
Partager sur d’autres sites

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...