Skocz do zawartości

  • 👋 Witaj na MPCForum!

    Przeglądasz forum jako gość, co oznacza, że wiele świetnych funkcji jest jeszcze przed Tobą! 😎

    • ✅ Pełny dostęp do działów i ukrytych treści
    • ✅ Możliwość pisania i odpowiadania w tematach
    • ✅ System prywatnych wiadomości
    • ✅ Zbieranie reputacji i rozwijanie swojego profilu
    • ✅ Członkostwo w jednej z największych społeczności graczy

    👉 Dołączenie zajmie Ci mniej niż minutę – a zyskasz znacznie więcej!

    Zarejestruj się teraz
  • 0

Jak wykryć keylogger?

oldisekk

Pytanie zadane przez oldisekk ,

Pytanie

oldisekk Budowniczy

oldisekk

Opublikowano
Budowniczy

oldisekk

Opublikowano

Witam,


 


Mam pytanie, ściągnąłem przez przypadek jakiś syf, zeskanowałem już PC, usunąłem gówna z procesów i folderów. Lecz pytanie, czy nadal mogę mieć gdzieś keylogger? netstat i netstat -ano wyglądają w porządku. Ktoś ma jakieś doświadczenia i ma sprawdzony sposób? Formatu w to nie wliczam :D


Karny od Chmiela ;3


24.05.2015 01:12 :D


Pzdrki

2 odpowiedzi na to pytanie

Rekomendowane odpowiedzi

oldisekk Budowniczy

oldisekk

Opublikowano
Budowniczy

oldisekk

  • Autor
Opublikowano

 

OTL Extras logfile created on: 2014-09-20 16:47:49 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = E:\Pobrane
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 52,67% Memory free
8,00 Gb Paging File | 5,68 Gb Available in Paging File | 70,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,56 Gb Total Space | 59,53 Gb Free Space | 61,02% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 26,15 Gb Free Space | 13,39% Space Free | Partition Type: NTFS
Drive E: | 172,79 Gb Total Space | 48,70 Gb Free Space | 28,19% Space Free | Partition Type: NTFS
 
Computer Name: KRYSTIANPC | User Name: Krystian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = OperaStable] -- "C:\Program Files (x86)\Opera\Launcher.exe" -noautoupdate -- "%1"
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = OperaStable] -- "C:\Program Files (x86)\Opera\Launcher.exe" -noautoupdate -- "%1"
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1"
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1"
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04847500-8899-44B5-812E-5EEF60CB8D87}" = lport=6881 | protocol=6 | dir=in | name=war thunder | 
"{060D1BAC-3B5D-4F28-9A3E-F5266D6D6121}" = lport=443 | protocol=6 | dir=in | name=war thunder | 
"{0F02EE96-355F-4AF5-B881-02EB39B5FC12}" = lport=7853 | protocol=6 | dir=in | name=war thunder | 
"{11719365-EC64-494A-BCFF-59CFC0B4A398}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{13AA1C0D-9DC7-4F41-98E9-04143B9597CF}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{166E1D3B-9CB9-4CB5-937A-28739E9EE9D5}" = lport=80 | protocol=6 | dir=in | name=war thunder | 
"{1B012166-9EC4-46A0-AA9D-412C911051EE}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | 
"{2235B044-F686-432E-B5EC-633B272FD892}" = lport=7850 | protocol=6 | dir=in | name=war thunder | 
"{25539C2E-BAFE-4DB9-BDAF-729858474B96}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2E865B6A-9E93-4EAD-9CF8-A116F95D34FF}" = lport=3478 | protocol=17 | dir=in | name=war thunder | 
"{34400EDC-DDB9-45FD-9E62-16CD9E112379}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{4A21F4BF-E1DE-4038-B89B-A8EFCE81275B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{50E7A1E5-1F41-47B9-BB26-FD7B6C9D7655}" = lport=27022 | protocol=6 | dir=in | name=war thunder | 
"{568CE058-7A58-4726-999C-7F8E3AA760D0}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{63F6B238-1E56-4729-9CC1-6FD3B3EC01FC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{65CA2753-CFA3-4028-81C1-0CF890C2D028}" = rport=139 | protocol=6 | dir=out | app=system | 
"{72A0CB66-59D1-43E7-A955-15B3B39BDE7A}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{73F9F7EC-446D-4D6C-AAC7-BE2C0A4193EC}" = rport=445 | protocol=6 | dir=out | app=system | 
"{7596F261-B51A-4018-8967-B7C4B8702F40}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{7D7D613C-3CC5-40E2-88D0-27666A1DBE86}" = lport=20010 | protocol=17 | dir=in | name=war thunder | 
"{85E038AA-99E5-4552-8216-C03FD293BBEB}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{96935D30-C710-4CB7-ACEA-E41D2BA2F0E6}" = lport=8090 | protocol=6 | dir=in | name=war thunder | 
"{9C0256F9-00BD-412C-8513-24A89C31A42F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{9C216858-024D-4EE6-B514-7B7EAFDC5921}" = rport=137 | protocol=17 | dir=out | app=system | 
"{B25D9923-0DC0-409F-8F98-AE021FF7554F}" = lport=137 | protocol=17 | dir=in | app=system | 
"{B89D89E0-6ACE-4230-8FCE-90B82BCF6763}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 | 
"{C4A5D0C9-0410-4C85-BA06-D24EC7783CA8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C87D5977-7A0A-49D7-9E67-46A421016016}" = lport=445 | protocol=6 | dir=in | app=system | 
"{D503A75D-3F30-4EA6-94AE-382F762D2949}" = lport=33333 | protocol=6 | dir=in | name=war thunder | 
"{D5FF853F-B2B8-4CD6-BF95-40814627A4A3}" = lport=20443 | protocol=6 | dir=in | name=war thunder | 
"{E50EC67D-6A76-4DD4-B8B1-B9DCAE76D852}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E58AE52D-ACBA-4F00-9788-797ECC32074E}" = rport=138 | protocol=17 | dir=out | app=system | 
"{E6B5843A-116B-44C4-B025-EFD40BFE6937}" = lport=7852 | protocol=6 | dir=in | name=war thunder | 
"{E8E95FCD-55F6-4765-AB8B-9C82FE531C76}" = lport=139 | protocol=6 | dir=in | app=system | 
"{E9D26B39-E8F0-4ED1-A10B-AC2F5F065353}" = lport=138 | protocol=17 | dir=in | app=system | 
"{F906BF33-A3F6-48FB-8D7E-6E1D7D0AF8EA}" = rport=10243 | protocol=6 | dir=out | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04B42FA3-E8C9-40EA-BEC3-4DFD4A06ECCF}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dota 2 beta\dota.exe | 
"{0564DECC-B67F-4AA6-81F4-C727ED34BA50}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | 
"{06A8BD21-B8DC-4C99-AE0B-BB07DA7361F6}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | 
"{06ADC9CA-7F55-4236-88D3-61EB36ED6E25}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | 
"{07AFCA0B-575B-437F-A695-850EF8E50ED9}" = protocol=6 | dir=in | app=c:\users\krystian\appdata\roaming\utorrent\utorrent.exe | 
"{099BDC0C-1D80-48A6-974D-8706AA34A0A1}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe | 
"{0B3D2C3E-7118-4D62-9F9D-35F4BDDDE29A}" = protocol=6 | dir=in | app=c:\program files\pcdapp\dgen.exe | 
"{0EDBA135-AA8A-45F6-A57F-118F2637F38E}" = protocol=58 | dir=in | [email protected],-28545 | 
"{0EE4EAB3-92DA-4EF3-87E6-120549CF350A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe | 
"{12B29D00-86DA-4B5E-A0CB-FCB51212D9F4}" = protocol=6 | dir=in | app=c:\program files\pcdapp\cgminer.exe | 
"{14DEC2A0-B344-4D3A-B7E7-5FDDB93CD008}" = protocol=6 | dir=out | app=system | 
"{1626E17D-1D91-4C6E-8B6C-6A455B136E30}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | 
"{1F87A5C4-29C7-4DA0-A9B1-84E8DFAF7DAE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{233436A6-B580-45BA-B0C8-843E70B99B99}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe | 
"{261AF0AC-CF2F-4F71-99DA-DBD18BE1FC6A}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{26A8DA8A-F006-4651-83E6-F3047B30193E}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\primeworld\pwlauncher.exe | 
"{2765C284-89B6-4D8C-A872-6AEB6A9AFA87}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{27D1536C-2305-4EBC-A464-BC622218C4D7}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{284A30E4-888F-426C-AB6D-DD17F00851FF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe | 
"{307DE90A-A949-4474-87CA-070B86848DF4}" = protocol=17 | dir=in | app=d:\steam\steam.exe | 
"{3367B9AA-0A21-4084-A3BC-0E9C3326428F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | 
"{3523D67F-076C-439C-AD67-C396E30A1E27}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe | 
"{38B1A760-B703-4F9C-8A0D-B2422A57272F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe | 
"{39454B22-BE23-482A-9A21-B5AE8C97BE47}" = protocol=1 | dir=in | [email protected],-26140 | 
"{3B4561CD-2F5D-42EA-B577-63E07CA267F3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{3FFA924B-4A86-41F8-8742-828904988EC9}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | 
"{402164F1-CA35-4BB5-A61F-D4B095FCC1E9}" = protocol=6 | dir=in | app=d:\steam\bin\steamwebhelper.exe | 
"{402D764D-0F43-40CA-B1D8-E0DAB9232CBF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{42AC39D1-0CE5-4184-A728-F73BA8E3A382}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe | 
"{4BA82058-277E-46E3-9E3D-4A4C0C214C92}" = protocol=17 | dir=in | app=e:\program files (x86)\origin games\fifa world\fifaworld.exe | 
"{4D423221-1999-413B-8619-7C3CFA3CCBA5}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\floating point\floating point.exe | 
"{53233808-334A-4197-8DC7-473FA21948E5}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{5379E9AB-95E1-42F4-9751-5711D54348C9}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | 
"{5673F921-BA5C-4C3B-B018-343CF565FF1D}" = protocol=6 | dir=in | app=e:\steam\steam.exe | 
"{56779419-65B3-4479-AEC7-50298311BD26}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\red orchestra 2 - single player\binaries\win32\rogame.exe | 
"{570C7379-23F5-4B9C-AA42-68EB8BC68FD2}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\rbs\really big sky.exe | 
"{5722570D-6BC5-42F1-804B-51884FACC389}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe | 
"{586977A0-F6D6-4C43-8F76-BB40F90AF718}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{5D6F64E7-564A-4562-8DB8-62F3B55A6706}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dota 2 beta\dota.exe | 
"{617FDB3C-BC0F-4D2E-9E21-892A8DC8AEC4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe | 
"{6429BF7E-E281-4058-8BEE-1FFB00B5F188}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{64541619-B54B-4C3E-91D5-FDCF06966EB7}" = protocol=17 | dir=in | app=c:\users\krystian\appdata\roaming\utorrent\utorrent.exe | 
"{64631731-3EC5-444A-9089-53BE74F65582}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dead island epidemic\dead island epidemic - launcher.exe | 
"{676123E1-F474-4DBE-97AC-FE43E3CB15A5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | 
"{6A469691-248F-4B96-BBAA-19441D8833AC}" = protocol=6 | dir=in | app=e:\program files (x86)\origin games\fifa world\fifaworld.exe | 
"{6DEE8F39-A9C1-460E-AC13-BD790046C36F}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\mountblade warband\mb_warband.exe | 
"{6FD6AC0D-1F63-4AB6-913A-B99CE1D2EBFD}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | 
"{73E5F0AA-9B02-438B-B588-E9B756AFCF71}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe | 
"{7433FEA7-EFBC-45A6-A7A6-4BB125857DAB}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{746265F0-6739-44ED-8135-F604184B8F69}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{74D137A2-57D3-4AEE-9633-0EC990C712AD}" = protocol=17 | dir=in | app=c:\program files\pcdapp\dgen.exe | 
"{7B978191-63D6-4F35-BA18-7DFE4A9095ED}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{7BFB1D21-B407-44C0-B687-CECD6E8EB84F}" = dir=out | app=c:\program files\eslwire\wire.exe | 
"{7DFBED7B-CCA1-445B-98E0-BAE9365538B5}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{7F3AF7D7-A3DB-4E3C-9C0F-C4F2AE9A7EEA}" = protocol=17 | dir=in | app=d:\steam\bin\steamwebhelper.exe | 
"{805166F6-99EC-4D73-98F9-AA8D14AC50C8}" = dir=in | app=c:\program files\eslwire\wire.exe | 
"{81B3168E-C4D0-4370-ACB0-202F8ADB9F4E}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\floating point\floating point.exe | 
"{8526ACA6-7EC6-448F-BE8A-AB93118B6434}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8823DC09-8D26-4992-B9DC-F62C19758D13}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | 
"{8C2282EE-8463-4DDF-800B-FA471EA18DD5}" = dir=in | app=c:\program files (x86)\remote manipulator system - host\rutserv.exe | 
"{8CACB4EB-9901-48D2-83C5-FA3558778CE5}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\red orchestra 2 - single player\binaries\win32\rogame.exe | 
"{8D951030-E959-4955-A44E-61C1BA2132F1}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{8ECF8ED7-40C6-4EE4-A1A8-2691603C6500}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\mountblade warband\mb_warband.exe | 
"{909BC560-D03A-4583-91B9-C0F5AB382AA3}" = protocol=17 | dir=in | app=e:\warthunder\launcher.exe | 
"{90DC3BC7-CD3B-44AD-9730-5A212BBD801A}" = protocol=17 | dir=in | app=e:\programy\tunngle\tunngle.exe | 
"{9199C3C5-BB77-4610-A34C-0FD01E496ED4}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\team fortress 2\hl2.exe | 
"{9363AED5-31F8-4309-B3E5-EF27533343DF}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe | 
"{93F9DD1F-08D0-4126-B7AD-7A6A0D3A206A}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\dead island epidemic\dead island epidemic - launcher.exe | 
"{95F2557A-F0B0-4A3B-BC09-0D53C85E7805}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\orion dino beatdown\binaries\win32\dinohordegame.exe | 
"{96E3E0AD-B681-4C5A-8AFD-B1FCD56C9010}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{9BCD7824-0158-4AF5-A227-A9C75045F981}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | 
"{9D959B02-5DA1-41DA-AE8E-C684660A1C99}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\pid\pid.exe | 
"{A1470A4E-A1F6-4070-B551-813CAE208B05}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe | 
"{A22AF61F-0525-47EB-958E-B0D65DA9748F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{A354A261-9D08-4DC5-AF94-34D1A36D41FB}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | 
"{A3688818-E840-4D07-9C9F-6595DE6AB67C}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\dota 2 beta\dota.exe | 
"{A3BFF2AC-154F-4D58-B054-51651EEC3FDA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A4A26952-659A-4570-B662-BB15B001F8BB}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\orion dino beatdown\binaries\win32\dinohordegame.exe | 
"{A4F1B61E-C5B1-4D83-A5F4-43D8F547B9F9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{A8F31F3E-1EE5-4D81-955C-9DBF183B7CD2}" = protocol=6 | dir=in | app=e:\programy\tunngle\tnglctrl.exe | 
"{AB16D7D4-C94B-4BD3-BE43-E778F8453B55}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | 
"{AE2C8197-F3D3-4CC1-8114-16499051E5F6}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{B0D58F1F-9F47-43A6-86ED-2B094F11F858}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dota 2 beta\dota.exe | 
"{B53627C6-1783-4172-9417-D409F21E4713}" = protocol=1 | dir=in | [email protected],-28543 | 
"{B5E90922-6187-4F15-9406-F9614AB97D21}" = protocol=17 | dir=in | app=e:\programy\tunngle\tnglctrl.exe | 
"{BD29D74D-BE41-4FB9-A0A3-666308558C58}" = protocol=58 | dir=out | [email protected],-28546 | 
"{C27841DC-3FA0-454A-BFE4-E79C67E5F4F6}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\rbs\really big sky.exe | 
"{C2872688-F328-4A0F-AFC2-AF48246F62FA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{C3B22A7F-6F3C-493C-B6D1-A4CDC919A1DE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{C5280A41-B05E-4152-A9C0-65A53363444E}" = protocol=58 | dir=in | [email protected],-26142 | 
"{C5D381E0-3C58-4939-A009-9BFFF48B12B3}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\orion dino beatdown\binaries\win32\dinohordegame.exe | 
"{C6F1BFA1-A429-4670-9E94-34D3D5644D2F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe | 
"{C90970D5-570C-4440-B686-1BE0ACF47E6C}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\team fortress 2\hl2.exe | 
"{CA172EBA-64B3-405D-B637-84FECA52BEB2}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe | 
"{CB6026F1-DF28-47D0-B702-904EBE9DAD86}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | 
"{CC2855DE-6FB5-411B-9BF1-694A333C1453}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{CCB65D07-8FE7-43C7-8B90-C151EAEBBC3D}" = protocol=1 | dir=out | [email protected],-28544 | 
"{CE1F4923-A478-4406-BDBB-2B884E8B4495}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe | 
"{CE37ECB9-F471-4203-A63E-286BEA7226A3}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{CECF0054-C0E8-4C16-95F3-54849578DBC3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{CEE2A118-19B7-4712-A0F0-470D830D4FA3}" = protocol=6 | dir=in | app=d:\steam\steam.exe | 
"{D121CBA7-9BCB-4A79-813C-6D2DF6F86251}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | 
"{DCDF2D57-AAC6-4322-B28D-3BF0E9358A19}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\narcissu2\narci2.exe | 
"{DE79E308-215C-4611-BF7C-14EF0D14E67B}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\afterfall insanity\binaries\win32\insanity-win32-shipping.exe | 
"{E2D56792-F225-40E7-A400-A2170F754443}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe | 
"{E2EDB5BE-DCCE-4743-ACF9-0E3C89AB6F77}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E313D6F8-DB9D-4137-ADBB-83386F67B7DF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | 
"{E51B8749-6A3C-4212-93D8-45B220E2EC74}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | 
"{E617068E-704A-4789-9BC5-477B29DCDC8B}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | 
"{E935B8A7-16FA-48C4-BA95-F185E801039F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\half-life\hl.exe | 
"{E9666D53-47B3-4B36-9F15-5093F940A23F}" = protocol=17 | dir=in | app=e:\steam\steam.exe | 
"{E96C5618-C17D-48CF-9CF2-152EDC2FEBAC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{EE4FAF41-D654-4BC5-8DAD-5F536236F4BA}" = protocol=17 | dir=in | app=c:\program files\pcdapp\cgminer.exe | 
"{EE8A2839-0B1D-45CD-BDA4-0D11D23B0970}" = protocol=6 | dir=in | app=e:\warthunder\launcher.exe | 
"{EF653A95-6805-4173-BDEB-DE5C4F2502D2}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{F066AC9A-3643-4FB2-97DD-029FDFC93F0A}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\afterfall insanity\binaries\win32\insanity-win32-shipping.exe | 
"{F2E15888-4B58-4B0B-A2B1-8DB99924B287}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\primeworld\pwlauncher.exe | 
"{F414E91D-E6B7-470C-B3D7-7C734400D3E8}" = protocol=6 | dir=in | app=e:\programy\tunngle\tunngle.exe | 
"{F5354A9E-6059-43C8-97ED-8346DAD80B10}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\orion dino beatdown\binaries\win32\dinohordegame.exe | 
"{F570437A-C1F6-406A-9691-8C35B1AA9FD6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | 
"{F6A60DA6-890D-4065-8505-B698A3F4A7E8}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\pid\pid.exe | 
"{F7BB9A9D-34CA-4032-B1AC-3DC95273E1C3}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\narcissu2\narci2.exe | 
"{FF841C4D-4BB5-444A-A513-7CD6AB0B0E69}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"TCP Query User{1F3BFE4D-6B66-40D1-A676-288F59116DB0}E:\titan quest\immortal throne\tqit.exe" = protocol=6 | dir=in | app=e:\titan quest\immortal throne\tqit.exe | 
"TCP Query User{22403CE9-3E92-4CF2-86BF-23BAE7F94A7F}D:\payday\payday 2\payday2_win32_release.exe" = protocol=6 | dir=in | app=d:\payday\payday 2\payday2_win32_release.exe | 
"TCP Query User{306EEBE9-278C-4F70-9BAC-B60F14FFC9B8}E:\programy\easy-hide-ip\easy-hide-ip.exe" = protocol=6 | dir=in | app=e:\programy\easy-hide-ip\easy-hide-ip.exe | 
"TCP Query User{3FD7EBD2-9F57-4B3D-A8C4-F119D386A3E1}E:\vixa czysta\vixa.eu\metin2client.bin" = protocol=6 | dir=in | app=e:\vixa czysta\vixa.eu\metin2client.bin | 
"TCP Query User{5DCBB978-1C0E-43F1-800B-3D60D278E9C1}D:\tera\tera-launcher.exe" = protocol=6 | dir=in | app=d:\tera\tera-launcher.exe | 
"TCP Query User{6E028384-8521-460D-9CCB-E5EA9C446A11}C:\users\krystian\appdata\roaming\.zyczujdk7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\users\krystian\appdata\roaming\.zyczujdk7\bin\javaw.exe | 
"TCP Query User{8304F700-1BA9-4E46-B723-40BAED9F756A}E:\vixa.eu\vixa.exe" = protocol=6 | dir=in | app=e:\vixa.eu\vixa.exe | 
"TCP Query User{9E5AE8AC-6660-4D36-BCD3-C3ABD276B2D2}E:\vixa czysta\vixa.eu\vixa.exe" = protocol=6 | dir=in | app=e:\vixa czysta\vixa.eu\vixa.exe | 
"TCP Query User{A2A72AB5-6029-4545-BFB9-EB8B9F1DA1C7}E:\vixa.eu\metin2client.bin" = protocol=6 | dir=in | app=e:\vixa.eu\metin2client.bin | 
"TCP Query User{A6BB9E16-5878-4BEB-B7DC-E041578899FD}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"TCP Query User{A8EFCA72-0BB2-4FBF-A830-69D599F79795}E:\programy\totalcmd\totalcmd64.exe" = protocol=6 | dir=in | app=e:\programy\totalcmd\totalcmd64.exe | 
"TCP Query User{A8FC5A5A-D7AD-4664-A519-D18147F0318A}E:\vixa.eu\metin2.exe" = protocol=6 | dir=in | app=e:\vixa.eu\metin2.exe | 
"TCP Query User{B992AAB3-C821-4DB3-8930-ECECF8E2AF90}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{BCFE51C9-42ED-4DD2-AC5A-8D8A8A7E08B8}E:\kerunis.pl\kerunis.exe" = protocol=6 | dir=in | app=e:\kerunis.pl\kerunis.exe | 
"TCP Query User{C5705D6B-6E99-4110-ADFD-B85E77C03CB8}D:\steam\steamapps\common\counter-strike global offensive\csgo.exe" = protocol=6 | dir=in | app=d:\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"TCP Query User{D2EA04B5-88D0-4A71-A565-0B7A16CD3A61}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"UDP Query User{02BC456B-8007-4BA1-904C-47323A225602}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{1B5A3A11-B606-4ED8-BF74-BE6F78E38C2D}D:\payday\payday 2\payday2_win32_release.exe" = protocol=17 | dir=in | app=d:\payday\payday 2\payday2_win32_release.exe | 
"UDP Query User{322E5D82-F127-4C33-90BA-D025299E9B92}E:\vixa.eu\metin2.exe" = protocol=17 | dir=in | app=e:\vixa.eu\metin2.exe | 
"UDP Query User{3E8A1D4F-88F0-4170-B53A-0FE1B2637452}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"UDP Query User{5F39F9C7-CB97-4D9F-B580-A4913A5ADEBF}E:\programy\totalcmd\totalcmd64.exe" = protocol=17 | dir=in | app=e:\programy\totalcmd\totalcmd64.exe | 
"UDP Query User{6884EB4B-2927-4942-8A31-77B7537A04A0}C:\users\krystian\appdata\roaming\.zyczujdk7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\users\krystian\appdata\roaming\.zyczujdk7\bin\javaw.exe | 
"UDP Query User{742121DB-A3F6-4435-871D-D709FC326AEB}D:\tera\tera-launcher.exe" = protocol=17 | dir=in | app=d:\tera\tera-launcher.exe | 
"UDP Query User{8403D32B-EC60-4BEA-BB58-566989E6E06E}E:\programy\easy-hide-ip\easy-hide-ip.exe" = protocol=17 | dir=in | app=e:\programy\easy-hide-ip\easy-hide-ip.exe | 
"UDP Query User{8BFD988B-63FB-4B72-A79D-D7334AD1F26E}E:\kerunis.pl\kerunis.exe" = protocol=17 | dir=in | app=e:\kerunis.pl\kerunis.exe | 
"UDP Query User{8F732266-50E6-43A6-AF2B-DAFF41EDEB06}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"UDP Query User{9080BF88-CD0D-460A-B942-013EA80589D0}E:\vixa czysta\vixa.eu\vixa.exe" = protocol=17 | dir=in | app=e:\vixa czysta\vixa.eu\vixa.exe | 
"UDP Query User{98DC2296-485F-4932-AE22-3B758543FCB0}E:\vixa.eu\vixa.exe" = protocol=17 | dir=in | app=e:\vixa.eu\vixa.exe | 
"UDP Query User{A44DC7F2-E3E5-4BB4-B7AF-B74C9CD16D6C}E:\vixa czysta\vixa.eu\metin2client.bin" = protocol=17 | dir=in | app=e:\vixa czysta\vixa.eu\metin2client.bin | 
"UDP Query User{B9C52F63-DE77-4687-8D33-1066DA73D641}E:\vixa.eu\metin2client.bin" = protocol=17 | dir=in | app=e:\vixa.eu\metin2client.bin | 
"UDP Query User{C5BBEC2A-ACE8-4CAF-B294-E45F2AC74269}D:\steam\steamapps\common\counter-strike global offensive\csgo.exe" = protocol=17 | dir=in | app=d:\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"UDP Query User{E96E29A4-193D-4A1F-97CC-9764058954F7}E:\titan quest\immortal throne\tqit.exe" = protocol=17 | dir=in | app=e:\titan quest\immortal throne\tqit.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.8
"{17016DA1-F040-4032-BD36-34DD317BC9D5}" = HP Photosmart All-In-One Driver Software 13.0 Rel. A
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{269F9470-26A4-11E1-83EE-F04DA23A5C58}" = Vegas Pro 11.0 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F06417065FF}" = Java 7 Update 65 (64-bit)
"{29AFE1B0-26A4-11E1-BFD4-F04DA23A5C58}" = MSVCRT Redists
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{308051DA-0048-7A07-FE8B-9B6EC119A9E8}" = AMD Catalyst Install Manager
"{44AAA767-F540-F091-4571-ADCBC10B0C92}" = AMD Fuel
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{678A75C7-5953-B109-57EE-46C7BA4C29C1}" = AMD Drag and Drop Transcoding
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{80E64FDE-029B-11E2-A955-F04DA23A5C58}" = MSVCRT Redists
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1 RC
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{AEF57B06-B494-8180-AFC7-05EFB1DB2B64}" = ccc-utility64
"{BD1BCEF8-5CD6-D8ED-7D36-31C2172076EA}" = AMD Media Foundation Decoders
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{E70808B9-78FE-3081-9658-A3C9DBC9A798}" = Microsoft .NET Framework 4.5.1 RC
"{ED273D26-E354-1A5B-A0D0-CB5258D43BD2}" = AMD Wireless Display v3.0
"{FCC4426F-0296-D30D-729C-E76C8E7252C7}" = AMD Accelerated Video Transcoding
"ESL Wire_is1" = ESL Wire 1.17.3
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"Shop for HP Supplies" = Shop for HP Supplies
"SteelSeries Engine" = SteelSeries Engine
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{046B79EE-7ED3-37A4-621A-FE297EF484C2}" = CCC Help Greek
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{10CB5DDD-38E1-2EB2-F62C-C1948A99943E}" = AMD Catalyst Control Center
"{1194740D-0DB8-A508-31BA-E722597B4516}" = Catalyst Control Center Graphics Previews Common
"{1246FF64-3035-4A92-8FE6-A968275495EB}" = Sony Vegas Pro 8.0
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1AE3E621-E0C0-4aa1-B10B-B3E353A8D110}" = c3100_Help
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1FB16E3B-3AFB-46CB-6E83-2F5A0CF4ED16}" = Catalyst Control Center Localization All
"{2558EE36-1FC9-4977-B6D3-9EFFBE7A0CC1}_is1" = Testy Aplus 5.1.3.68
"{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 51
"{2E3A81FB-7952-F8CB-9AD5-50544E2F4838}" = CCC Help Czech
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{354038F6-0A35-4C55-A80B-F86C4C1A6D38}" = C3100
"{37476589-E48E-439E-A706-56189E2ED4C4}_is1" = DeleteAd
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
"{4172E797-CE12-AC47-05B7-0E48BDB33E75}" = CCC Help Russian
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{4428AEE6-FA5E-2913-8D12-B410E85E11AA}" = CCC Help Spanish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{4FF1533E-FF2C-A04A-25DD-A8AEC6FA106B}" = CCC Help Chinese Standard
"{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends
"{6071CB80-DABC-B10D-F244-7F410FB3B150}" = CCC Help Polish
"{6343B6BA-F97F-B336-9ED8-FFD43776E84D}" = CCC Help Finnish
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{70B1DA58-A2B9-4EA0-B83D-F03CBEEAE22D}" = LogMeIn Hamachi
"{72706CF4-6430-40D1-9255-957BCE796D79}_is1" = Minecrat Pingwin Pack 3 wersja 3.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.18
"{7f51bdb9-ee21-49ee-94d6-90afc321780e}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8D3A11D0-D925-FA0F-43F3-242E49975CD2}" = CCC Help Danish
"{8EF39A9F-6A57-9706-86A5-9312D9ED8016}" = CCC Help Portuguese
"{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}" = EA Sports FIFA World
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{92352C97-C657-DB89-5F3A-E8C3789D9C89}" = CCC Help Chinese Traditional
"{95545E55-3309-1929-FF41-2908A9706742}" = CCC Help Turkish
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}" = Software Version Updater
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CA5F712-9CAA-B3CB-02D3-7134DFC8801E}" = CCC Help French
"{A128A816-FD3F-990E-DD80-E1735BD718AE}" = CCC Help Italian
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = TERA
"{A7AEE29F-839E-46B5-B347-6D430618129F}" = AIO_CDA_Software
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.08) - Polish
"{AFC9ECA9-6A4E-1370-98F3-002B63B5AF8E}" = CCC Help Thai
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B88F2045-CF9A-996C-1670-6F7D65F1D18A}" = CCC Help Norwegian
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BED96D0C-7743-3CE3-F7DF-A0A4475FBF2F}" = CCC Help Hungarian
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C637A71C-A4B2-4B47-1B2A-1042A8D525A3}" = ExsttraSaoviinGss
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB79256B-C0E0-40C6-8EB7-BDD796203581}" = Catalyst Control Center - Branding
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{E297492A-E114-CAE0-502E-5F36C386DD30}" = CCC Help Dutch
"{E6533A85-ED92-F897-2B68-58AC3BD87F94}" = CCC Help English
"{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
"{EBAC163A-588E-1E5A-3CE8-826E9A449244}" = CCC Help Korean
"{ED65BD75-CEF3-C0C2-9E9C-FA567484FF60}" = CCC Help Japanese
"{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1" = War Thunder Launcher 1.0.1.376
"{EEB34D84-92A1-7BE3-6DB7-ABD1C4912D6B}" = Catalyst Control Center InstallProxy
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1289D68-1C48-930F-51CF-577BDB371252}" = CCC Help Swedish
"{F3F340A5-64EC-AEEC-4BDF-DC537D390BF5}" = CCC Help German
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"Battle.net" = Battle.net
"Battlelog Web Plugins" = Battlelog Web Plugins
"DAEMON Tools Lite" = DAEMON Tools Lite
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FileZilla Client" = FileZilla Client 3.8.1
"Firefighters 2014_is1" = Firefighters 2014
"Fraps" = Fraps (remove only)
"Google Chrome" = Google Chrome
"HexChat_is1" = HexChat
"HotspotShield" = Hotspot Shield 3.42
"inethnfd" = OffersWizard Network System Driver
"League of Legends 3.0.1" = League of Legends
"LogMeIn Hamachi" = LogMeIn Hamachi
"McAfee Security Scan" = McAfee Security Scan Plus
"Mirillis Action!" = Action!
"Notepad++" = Notepad++
"Open Broadcaster Software" = Open Broadcaster Software
"Opera 24.0.1558.61" = Opera Stable 24.0.1558.61
"Origin" = Origin
"Ravia.eu" = Ravia.eu
"RichMediaViewV1release166" = Rich Media View
"screenSHU" = screenSHU - the fastest screen capture ever.
"SpeedFan" = SpeedFan (remove only)
"SpeedyDrive" = Speedy Drive (remove only)
"Steam" = Steam
"Steam App 10" = Counter-Strike
"Steam App 104900" = ORION: Dino Horde
"Steam App 201570" = Really Big Sky
"Steam App 213850" = Magic 2014 
"Steam App 218740" = Pid 
"Steam App 222900" = Dead Island: Epidemic
"Steam App 224420" = Afterfall InSanity Extended Edition
"Steam App 235340" = Prime World
"Steam App 236830" = Red Orchestra 2: Heroes of Stalingrad - Single Player
"Steam App 264380" = Narcissu 1st & 2nd
"Steam App 283880" = Heroine's Quest: The Herald of Ragnarok
"Steam App 302380" = Floating Point
"Steam App 440" = Team Fortress 2
"Steam App 48700" = Mount & Blade: Warband
"Steam App 550" = Left 4 Dead 2
"Steam App 570" = Dota 2
"Steam App 63380" = Sniper Elite V2
"Steam App 730" = Counter-Strike: Global Offensive
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Titan Quest_R.G. Mechanics_is1" = Titan Quest
"Tunngle beta_is1" = Tunngle beta
"WinGimp-2.0_is1" = GIMP 2.4.5
"WinRAR archiver" = WinRAR 5.01 (32-bit)
"World of Warcraft" = World of Warcraft
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GG" = GG
"OpenFM" = OpenFM
"UnityWebPlayer" = Unity Web Player
"uTorrent" = µTorrent
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 2014-09-09 14:46:53 | Computer Name = KrystianPC | Source = Application Hang | ID = 1002
Description = Program javaw.exe w wersji 7.0.650.20 zatrzymał interakcję z systemem
 Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
 dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
 akcji.    Identyfikator procesu: 16e4    Godzina rozpoczęcia: 01cfcc5e51733815    Godzina zakończenia:
 23    Ścieżka aplikacji: C:\Program Files\Java\jre7\bin\javaw.exe    Identyfikator raportu:
 a971eba5-3851-11e4-ae26-4061868eb8ff  
 
Error - 2014-09-11 11:31:46 | Computer Name = KrystianPC | Source = Application Hang | ID = 1002
Description = Program OBS.exe w wersji 0.6.2.2 zatrzymał interakcję z systemem Windows
 i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących
 tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.    Identyfikator
 procesu: 10b8    Godzina rozpoczęcia: 01cfcdd45901ea64    Godzina zakończenia: 45    Ścieżka
 aplikacji: C:\Program Files (x86)\OBS\OBS.exe    Identyfikator raportu: bc026603-39c8-11e4-ac9d-4061868eb8ff
 
 
Error - 2014-09-12 12:21:10 | Computer Name = KrystianPC | Source = Application Hang | ID = 1002
Description = Program OBS.exe w wersji 0.6.2.2 zatrzymał interakcję z systemem Windows
 i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących
 tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.    Identyfikator
 procesu: 1590    Godzina rozpoczęcia: 01cfcea47e4d382f    Godzina zakończenia: 31    Ścieżka
 aplikacji: C:\Program Files (x86)\OBS\OBS.exe    Identyfikator raportu: cd8fdb2f-3a98-11e4-b9c8-4061868eb8ff
 
 
Error - 2014-09-13 14:05:12 | Computer Name = KrystianPC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: javaw.exe, wersja: 7.0.650.20, sygnatura
 czasowa: 0x53bf962a  Nazwa modułu powodującego błąd: msvcr100.dll, wersja: 10.0.40219.1,
 sygnatura czasowa: 0x4d5f034a  Kod wyjątku: 0x40000015  Przesunięcie błędu: 0x00000000000761c9
Identyfikator
 procesu powodującego błąd: 0x5e4  Godzina uruchomienia aplikacji powodującej błąd:
 0x01cfcf589650a2c5  Ścieżka aplikacji powodującej błąd: C:\Program Files\Java\jre7\bin\javaw.exe
Ścieżka
 modułu powodującego błąd: C:\Program Files\Java\jre7\bin\msvcr100.dll  Identyfikator
 raportu: 80e9afdb-3b70-11e4-8548-4061868eb8ff
 
Error - 2014-09-13 14:05:20 | Computer Name = KrystianPC | Source = Application Hang | ID = 1002
Description = Program OBS.exe w wersji 0.6.2.2 zatrzymał interakcję z systemem Windows
 i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących
 tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.    Identyfikator
 procesu: c84    Godzina rozpoczęcia: 01cfcf62f4bb3b84    Godzina zakończenia: 2254    Ścieżka
 aplikacji: C:\Program Files (x86)\OBS\OBS.exe    Identyfikator raportu: 82825738-3b70-11e4-8548-4061868eb8ff
 
 
Error - 2014-09-18 10:57:12 | Computer Name = KrystianPC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 2014-09-19 11:53:31 | Computer Name = KrystianPC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 2014-09-19 12:31:53 | Computer Name = KrystianPC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 2014-09-19 15:53:27 | Computer Name = KrystianPC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 2014-09-20 05:05:55 | Computer Name = KrystianPC | Source = MsiInstaller | ID = 1024
Description = 
 
[ System Events ]
Error - 2014-09-17 10:55:45 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:31:27 na ?2014-?09-?16 było 
nieoczekiwane.
 
Error - 2014-09-18 10:55:00 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 20:58:40 na ?2014-?09-?17 było 
nieoczekiwane.
 
Error - 2014-09-19 11:50:19 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 21:02:54 na ?2014-?09-?18 było 
nieoczekiwane.
 
Error - 2014-09-19 12:30:49 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 18:29:14 na ?2014-?09-?19 było 
nieoczekiwane.
 
Error - 2014-09-19 12:30:51 | Computer Name = KRYSTIANPC | Source = BugCheck | ID = 1001
Description = 
 
Error - 2014-09-19 12:30:59 | Computer Name = KrystianPC | Source = Microsoft-Windows-WHEA-Logger | ID = 20
Description = Wystąpił krytyczny błąd sprzętowy.    Składnik: mostek północny firmy 
AMD  Źródło błędu: 3  Typ błędu: 7  Identyfikator procesora: 0    Widok szczegółów tego wpisu
 zawiera dodatkowe informacje.
 
Error - 2014-09-19 15:51:29 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 19:07:44 na ?2014-?09-?19 było 
nieoczekiwane.
 
Error - 2014-09-19 17:01:40 | Computer Name = KrystianPC | Source = Service Control Manager | ID = 7034
Description = Usługa TektonIT - RMS Host niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2014-09-20 05:04:39 | Computer Name = KrystianPC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 23:30:23 na ?2014-?09-?19 było 
nieoczekiwane.
 
Error - 2014-09-20 05:47:31 | Computer Name = KrystianPC | Source = bowser | ID = 8003
Description = 
 
 
< End of report >

Karny od Chmiela ;3


24.05.2015 01:12 :D


Pzdrki

Zarchiwizowany

Ten temat przebywa obecnie w archiwum. Dodawanie nowych odpowiedzi zostało zablokowane.

Pytania
×
×
  • Dodaj nową pozycję...