Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 30-04-2017 Uruchomiony przez IZA (01-05-2017 18:35:02) Uruchomiony z C:\Users\IZA\Desktop\FRST Windows 7 Home Premium Service Pack 1 (X64) (2012-01-11 16:04:26) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1137575165-3099178337-4115244329-500 - Administrator - Disabled) Gość (S-1-5-21-1137575165-3099178337-4115244329-501 - Limited - Disabled) IZA (S-1-5-21-1137575165-3099178337-4115244329-1000 - Administrator - Enabled) => C:\Users\IZA ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: COMODO Antivirus (Disabled - Up to date) {0C515E80-E355-69BD-3445-A511E5C186FD} AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Disabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated) Adobe Audition 3.0 (HKLM-x32\...\Adobe Audition 3.0) (Version: 3.0 - Adobe Systems Incorporated) Adobe Audition 3.0 Vista Compatibility (HKLM\...\{75d2897c-87aa-4a06-8710-3ebda9f02de0}.sdb) (Version: - ) Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) Archiwizator WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.19 - Atheros Communications Inc.) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) Audio Comparer (HKLM-x32\...\{343C731F-1C08-4F90-8268-B4F3F4F9E857}_is1) (Version: 1.7 - Bolide Software) Bernd Ott's Midi to Art-Net converter (HKLM-x32\...\{A582C1FC-F13B-4D35-BF94-53BF6426595F}) (Version: 1.6.0 - Bernd Ott) Blender (HKLM\...\{47A0EA10-D506-4473-AE99-5E07DD1062DE}) (Version: 2.77.1 - Blender Foundation) Bome MIDI Translator Pro 1.8.2 (HKLM-x32\...\MIDITranslatorPro_is1) (Version: 1.8.2 - Bome Software GmbH & Co. KG) Bome Virtual MIDI 2.0.0.38 (HKLM\...\BMIDI_Driver1.0.0.11_is1) (Version: - Bome Software GmbH & Co. KG) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform) ChamSys MagicQ (HKLM-x32\...\MagicQ) (Version: 1.7.3.9 - ChamSys Limited) COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 10.0.1.6223 - COMODO Security Solutions Inc.) COMODO Internet Security Premium (Version: 10.0.1.6223 - COMODO Security Solutions Inc.) Hidden COMODO Secure Shopping (HKLM-x32\...\Comodo Secure_Shopping_list_uninstall) (Version: 1.1.413851.97 - Comodo) COMODO Secure Shopping (x32 Version: 1.1.97.0 - COMODO) Hidden Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.4.51 - Conexant) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden dmXLAN v4.2 (HKLM-x32\...\{E2FEF0F2-54ED-40E0-B05A-8FD73169BD1D}) (Version: 4.2.0.0 - ELC lighting) dot2 3D v1.3.1.4 (HKLM-x32\...\dot2_3D_V1.3.1) (Version: 1.3.1.4 - MA Lighting Technologies) dot2 onPC 1.3.1 (HKLM-x32\...\dot2onpc_1.3.1) (Version: 1.3.1.4 - MA Lighting Technologies) DWG TrueView 2017 - English (Version: 21.0.52.0 - Autodesk) Hidden Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 6.0.2.0 - Lenovo) Energy Management (x32 Version: 6.0.2.0 - Lenovo) Hidden EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc) Exact Audio Copy 1.3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.3 - Andre Wiethoff) FastStone Image Viewer 6.1 (HKLM-x32\...\FastStone Image Viewer) (Version: 6.1 - FastStone Soft) foobar2000 v1.3.12 (HKLM-x32\...\foobar2000) (Version: 1.3.12 - Peter Pawlowski) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: - Marek Jasinski) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden iLive Editor V1.90 (HKLM-x32\...\42241C6B-7388-4B11-9E1D-7AB6930F7F15) (Version: 1.90 - Allen & Heath) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.10.1005 - Intel Corporation) Internet Security Essentials (HKLM-x32\...\ComodoIse) (Version: 1.1.413499.43 - Comodo) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Jingle Palette 4.4.5 (HKLM-x32\...\Jingle Palette) (Version: 4.4.5 - ) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.7400 - Broadcom Corporation) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0333}) (Version: 1.10.1209.1 - Lenovo EasyCamera) Lenovo EE Boot Optimizer (HKLM\...\Lenovo EE Boot Optimizer) (Version: 0.0.1.6 - Lenovo) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 7.0.1628 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 7.0.1628 - CyberLink Corp.) Hidden Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3728 - CyberLink Corp.) Lenovo YouCam (x32 Version: 3.1.3728 - CyberLink Corp.) Hidden Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo) Lightjams (HKLM\...\{D7553D23-3837-4BA3-A781-89D67410C30E}) (Version: 1.0.410 - LJ) LiveViewer6 (HKLM-x32\...\{4257C582-1CAE-4A11-9564-2CBA5880B109}) (Version: 6.43.1224 - Hitachi Maxell, Ltd.) MAGIX Analogue Modelling Suite Plus (HKLM\...\MX.{F485F2FE-1D3D-4F6D-AD4E-13FA5FB22A88}) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Analogue Modelling Suite Plus (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden MAGIX Vandal VST-PlugIn (HKLM\...\MX.{24F96DED-7B99-49C4-B877-CDCDC37762FA}) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Vandal VST-PlugIn (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden MAGIX VariVerb II VST-PlugIn (HKLM\...\MX.{7A97538C-6D3F-4BB5-B2A1-D0ECFB199A4C}) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX VariVerb II VST-PlugIn (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden MAGIX Vintage Effects Suite (HKLM\...\MX.{48978B41-9CD5-4274-9519-B622DD89727D}) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Vintage Effects Suite (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 53.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 53.0 (x86 pl)) (Version: 53.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.0.6312 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyFreeCodec (HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MyFreeCodec) (Version: - ) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.9.3.355 - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments) Native Instruments Traktor 2 (HKLM-x32\...\Native Instruments Traktor 2) (Version: 2.11.0.23 - Native Instruments) Need for Speed™ Carbon (HKLM-x32\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version: - ) Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia) Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.54.0 - Nokia) Nokia Suite (x32 Version: 3.8.54.0 - Nokia) Hidden OpenGL Extensions Viewer 4.4 (HKLM-x32\...\GLVIEW3) (Version: 444 - ) Oprogramowanie mikroukładu Intel® (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1) (HKLM\...\EA12B1FB53CE4E387C31A85236C41EF559B5E392) (Version: 12/02/2010 6.1.0.1 - Lenovo) Pakiet sterowników systemu Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) PLAY INTERNET (HKLM-x32\...\PLAY INTERNET) (Version: 23.015.05.05.264 - Huawei Technologies Co.,Ltd) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podręcznik użytkownika (x32 Version: 1.0.0.6 - Lenovo) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.7303 - CyberLink Corp.) PreSonus Studio One 2 x64 (HKLM\...\PreSonus Studio One 2) (Version: 2.6.0.24200 - PreSonus Audio Electronics) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden PX376 (HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\{a49686ba-61e2-477f-b251-8c674f751187}) (Version: 3.01 - PXM Marek Żupnik Spółka Komandytowa) Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10003 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform) Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - ) Room EQ Wizard V5 (HKLM-x32\...\RoomEQWizardV5) (Version: - John Mulcahy) Samplitude Pro X2 Silver (HKLM\...\MX.{C3A3C7A2-0118-4EAA-B51D-E8F26B22D320}) (Version: 13.1.3.176 - MAGIX Software GmbH) Samplitude Pro X2 Silver (Version: 13.1.3.176 - MAGIX Software GmbH) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.) Hidden Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden SlimCleaner Plus (HKLM\...\{62C8E97D-8CB2-4A56-90E8-0132893A43DE}) (Version: 1.4.0 - SlimWare Utilities, Inc.) SlimDrivers (HKLM-x32\...\{5AD12E7A-D739-4451-9BD1-3610EC56D8F5}) (Version: 2.2.45206 - SlimWare Utilities, Inc.) StickMAker (HKLM-x32\...\StickMAker) (Version: 1.0.0.7 - MA Lighting Technologies) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.0.0 - Synaptics Incorporated) Świadectwa Optivum (HKLM-x32\...\{F71DBF4E-B441-4447-BB45-E0FD0437C9D5}) (Version: 12.00.0002 - VULCAN) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.6.0 - GOG.com) UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.6 - Lenovo) VeriFace (HKLM-x32\...\VeriFace) (Version: 4.0.0.1224 - Lenovo) VirtualDJ Home FREE (HKLM-x32\...\{77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}) (Version: 7.4.1 - Atomix Productions) WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {1F1336C9-DEF6-493E-9D71-28B9147DD0E1} - System32\Tasks\{8910C40A-B94D-4C65-BF18-262662D4E317} => pcalua.exe -a C:\Users\IZA\Downloads\MidiTranslatorClassic1.6.1.exe -d C:\Users\IZA\Downloads Task: {28872B7D-9FED-4043-B40A-7A68EB5E1057} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29] (CyberLink) Task: {2954B4FA-948B-4F76-B486-51DCD451C179} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-23] (COMODO) Task: {2C3165B0-86C5-44CD-8727-A5CB712F5265} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {3FAB5E46-B175-4193-91E0-320114127414} - System32\Tasks\{0FC519BB-DFBF-437E-A15D-D6B10CE07C93} => pcalua.exe -a C:\Users\IZA\Desktop\ELCBUDDY\BuddySetup.exe -d C:\Users\IZA\Desktop\ELCBUDDY Task: {4BF8C75C-0F5F-4AC0-A043-BEBEB01A6E22} - System32\Tasks\{D98F15AD-CA3B-4DE0-9B2D-116B3979E467} => pcalua.exe -a E:\SetupWizard.exe -d E:\ Task: {63BC1035-6DE2-4961-A252-F88AA5EFD553} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-23] (COMODO) Task: {7EC81894-23C6-4D84-BC3E-257AAD53C379} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-04-23] (COMODO) Task: {88AD0C54-A0B7-470F-BF49-79E33C7E6AE7} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-23] (COMODO) Task: {8B334FCC-ED1B-4613-ADEE-E9B8E111B3B0} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-23] (COMODO) Task: {A4BD828A-7D0F-4C2C-B2E8-726B657028A1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {CCC0266C-9FCC-46B4-8E29-278B11997942} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-14] (Adobe Systems Incorporated) Task: {D016BB88-460C-4B70-A9FD-5D90C2732D9F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-10-29] (Apple Inc.) Task: {F2293A7D-82D9-4A20-A521-84B5BB57BEEF} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki Shortcut: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com Shortcut: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\realtech VR\OpenGL Extensions Viewer 4.4\OpenGL Extensions Viewer 4.4 Home Page.lnk -> hxxp://www.realtech-vr.com/glview Shortcut: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\realtech VR\OpenGL Extensions Viewer 4.4\realtech VR Home Page.lnk -> hxxp://www.realtech-vr.com ShortcutWithArgument: C:\Users\IZA\Desktop\Sweet Home 3D.lnk -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\javaws.exe (Oracle Corporation) -> -localfile -offline -J-Djnlp.application.href=hxxp://www.sweethome3d.com/SweetHome3D.jnlp "C:\Users\IZA\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\247e2df4-16141d2a" ShortcutWithArgument: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D\Sweet Home 3D.lnk -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\javaws.exe (Oracle Corporation) -> -localfile -offline -J-Djnlp.application.href=hxxp://www.sweethome3d.com/SweetHome3D.jnlp "C:\Users\IZA\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\247e2df4-16141d2a" ==================== Załadowane moduły (filtrowane) ============== 2017-04-05 06:57 - 2017-04-23 00:27 - 00244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll 2017-04-05 06:57 - 2017-04-23 00:27 - 00107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll 2017-01-13 14:56 - 2015-05-15 16:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-01-13 14:56 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-15 05:42 - 2015-06-20 16:07 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe 2015-06-20 16:09 - 2015-06-20 16:05 - 00651856 _____ () C:\ProgramData\PLAY INTERNET\OnlineUpdate\ouc.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2011-10-17 22:30 - 2011-10-17 22:30 - 01508192 _____ () C:\windows\system32\IcnOvrly.dll 2016-03-16 11:25 - 2016-03-16 11:25 - 00073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav 2008-12-20 05:20 - 2011-10-17 22:39 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll 2008-12-20 05:20 - 2011-10-17 22:39 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll 2011-10-17 21:58 - 2011-03-25 11:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2010-12-14 20:05 - 2010-12-14 20:05 - 00173856 _____ () C:\Program Files\Lenovo\Bluetooth Software\btkeyind.dll 2015-06-20 16:09 - 2013-08-31 07:44 - 02417152 _____ () C:\ProgramData\PLAY INTERNET\OnlineUpdate\QtCore4.dll 2015-06-20 16:09 - 2009-01-10 20:32 - 00011362 _____ () C:\ProgramData\PLAY INTERNET\OnlineUpdate\mingwm10.dll 2015-06-20 16:09 - 2009-06-23 04:42 - 00043008 _____ () C:\ProgramData\PLAY INTERNET\OnlineUpdate\libgcc_s_dw2-1.dll 2015-06-20 16:09 - 2013-08-31 07:46 - 01148416 _____ () C:\ProgramData\PLAY INTERNET\OnlineUpdate\QtNetwork4.dll 2011-10-17 22:30 - 2011-10-17 22:30 - 00013664 _____ () C:\Program Files (x86)\Lenovo\VeriFace\ChooseLang.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\autoexec.tmp:$CmdTcID [130] AlternateDataStreams: C:\windows\HelpPane.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\MusiccityDownload.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\notepad.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aaclient.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\acmigration.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\adsmsext.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\adtschema.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aeinv.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aitstatic.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdgfxinfo64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdmantle64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdmmcl6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdocl12cl64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdocl_as64.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdocl_ld64.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\amdpcom64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\apisetschema.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\appidapi.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\appidcertstorecheck.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\appidpolicyconverter.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\appraiser.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\asycfilt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atiapfxx.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aticalcl64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aticaldd64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\aticalrt64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atidemgy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atieah64.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atig6pxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atig6txx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atiglpxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atimpc64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atimuixx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atio6axx.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\ATIODCLI.exe:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\ATIODE.exe:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\atitmm64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atiumd6a.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atmfd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\atmlib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\AudioEng.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\AUDIOKSE.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\auditpol.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\bcdedit.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\blackbox.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\bmidilib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\bmidilib2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\bomemidi_coinst.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\catsrvut.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\cdd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\cdosys.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\centel.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\certcli.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\cewmdm.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\chajei.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\cintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\clfs.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\clfsw32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\clinfo.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\coinst_15.20.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\COLORCNV.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\comctl32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\CompatTelRunner.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\conhost.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\consent.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\CPFilters.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3d10level9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3d10warp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_35.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_36.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_37.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_39.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_40.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_41.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DCompiler_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dcsx_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dcsx_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_35.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_36.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_37.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_39.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_41.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx10_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx11_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx11_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_24.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_25.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_26.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_27.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_28.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_29.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\d3dx9_30.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_31.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\d3dx9_35.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_37.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_40.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_41.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\D3DX9_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\davclnt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\dciman32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\detoured.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\devinv.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\difx64.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\diskperf.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\drmmgrtn.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\dxmasf.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\dxtmsft.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\dxtrans.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\els.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\EncDec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\EncDump.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\fixmapi.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\fontsub.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\fveapibase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\generaltel.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\gfxSrvc.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\GfxUI.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\hlink.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\hsa-thunk64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ieapfltr.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ieetwcollectorres.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ieetwproxystub.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\iernonce.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\iesetup.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ieui.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ieUnatt.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ig4icd64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igdde64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfx11cmrt64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxcmjit64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxcmrt64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxCoIn_v3223.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\IGFXDEVLib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxdo.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxexps.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxext.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrara.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrchs.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrcht.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrcsy.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrdan.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrdeu.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrell.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrenu.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxresn.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxress.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrfin.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrfra.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrheb.lrc:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\igfxrhrv.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrhun.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrita.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrjpn.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrkor.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrnld.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrnor.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrptb.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrptg.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrrom.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrrus.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrsky.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrslv.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrsve.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrtha.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxrtrk.lrc:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\igfxTMM.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\iglhcp64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\iglhsip64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\IMJP10.IME:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\IMJP10K.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\imkr80.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\inetppui.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\INETRES.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\InkEd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\input.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\inseng.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\IntcDAuC.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\invagent.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\jscript.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\jscript9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\jscript9diag.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\jsproxy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\KBDAZE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\KBDAZEL.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\kbdgeoqw.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ksproxy.ax:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\logman.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mantle64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mantleaxl64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mcmde.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mcupdate_GenuineIntel.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mfds.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\mferror.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mfmjpegdec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mfps.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mfvdsp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MFWMAAEC.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MP3DMOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MP43DECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MP4SDECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MPG4DECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msaudite.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msdxm.ocx:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MshtmlDac.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mshtmled.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mshtmlmedia.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msihnd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msimsg.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msmmsp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msnetobj.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\msobjs.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msrating.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msscp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\MsSpellCheckingFacility.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mstscax.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msxml3r.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\msxml6r.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\mtxoci.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\netbtugc.exe:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\nlsbres.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\notepad.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ntoskrnl.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ntprint.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ntprint.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ntvdm64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\occache.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\OpenCL.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\pcaevts.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\pcalua.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\pcawrk.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\phon.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\pintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\polstore.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\poqexec.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\qintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\quick.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\relog.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\rpchttp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\rrinstaller.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\rstrui.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\scavengeui.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\sdbinst.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\setbcdlocale.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\shimeng.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\spwmp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\srcore.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\SysFxUI.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\tdh.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\tintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\tracerpt.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\tsgqec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\TSWbPrxy.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\typeperf.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\tzres.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\UCI64A72.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\ucrtbase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\usbaaplrc.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\UtcResources.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\vbscript.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\VIDRESZR.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WdfCoInstaller01011.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\webcheck.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\win32k.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\winipsec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\winload.efi:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\winload.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\winresume.efi:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\winresume.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WinSetupUI.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WinUSBCoInstaller.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMADMOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMADMOE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wmdrmsdk.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMPhoto.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wmpmde.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMSPDMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\WMSPDMOE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMVDECOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMVENCOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMVSDECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMVSENCD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WMVXENCD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wpdshext.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wpnpinst.exe:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\wshrm.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WSManHTTPConfig.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WsmAuto.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\wsmplpxy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wsmprovhost.exe:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\WsmRes.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\WsmWmiPl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wu.upgrade.ps.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wuapp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wuauclt.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wucltux.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wudriver.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wups.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wups2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\wuwebv.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\x3daudio1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\x3daudio1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\X3DAudio1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\X3DAudio1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\X3DAudio1_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\X3DAudio1_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\X3DAudio1_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_10.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_8.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine2_9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xactengine3_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAPOFX1_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\XAudio2_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xinput1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xinput1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\xinput1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\aaclient.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ac3filter.ax:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\adsmsext.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\adtschema.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdgfxinfo32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdmantle32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdmmcl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdocl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdocl12cl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdocl_as32.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdocl_ld32.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\amdpcom32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\apisetschema.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\apphelp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\appidapi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ArtDLL2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\asycfilt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiadlxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiadlxy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\aticalcl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\aticaldd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\aticalrt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\aticfx32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atidxx32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atieah32.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atigktxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiglpxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atimpc32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atioglxx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiu9pag.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiumdag.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiumdva.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atiuxpag.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atmfd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\atmlib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\AudioEng.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\AudioSes.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\auditpol.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\bcrypt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\blackbox.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\bmidilib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\bmidilib2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\BugTrap.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\catsrvut.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cdosys.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\certcli.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cewmdm.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\chajei.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\clfsw32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\comctl32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\comsvcs.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\CPFilters.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\credssp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\crypt32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cryptbase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cryptnet.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cryptsp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cryptsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\cryptui.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3d10level9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3d10warp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_35.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_36.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_37.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_39.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_40.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx10_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx11_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx11_43.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_24.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_25.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_26.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_27.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_28.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_29.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_30.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_31.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_33.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_34.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\d3dx9_36.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_37.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_38.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_39.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_40.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_41.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_42.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\dashardvb.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\davclnt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dciman32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\detoured.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\devenum.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\diskperf.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dmx120.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\DMX510Vb.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dmx60.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\drmv2clt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dwmapi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dwmcore.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\DWrite.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dxmasf.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\dxtmsft.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\dxtrans.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\Easylase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\els.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\EncDec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\EspionDll.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\explorer.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\FASTTime32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\fixmapi.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\fldrvw90.ocx:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\fontsub.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\FSUSB2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\FwRemoteSvr.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\gdi32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\gpapi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\GPhotos.scr:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\hlink.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\hsa-thunk.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\icm32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ieapfltr.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ieetwproxystub.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iernonce.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iesetup.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ieui.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ieUnatt.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ig4icd32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igd10umd32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igdde32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igdumd32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igfx11cmrt32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igfxcmjit32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igfxcmrt32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igfxdv32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\igfxexps32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iglhcp32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\iglhsip32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\IMJP10.IME:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\imkr80.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\INETRES.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\InkEd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\input.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\inseng.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\instnm.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\IntelCpHeciSvc.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\jscript.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\jscript9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\jscript9diag.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\jsproxy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\K8062D.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\K8062e.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\KBDAZE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\KBDAZEL.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\kbdgeoqw.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\kerberos.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\kernel32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\KernelBase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ksproxy.ax:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ksuser.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\logman.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\lpk.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\LPT_dmx.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mantle32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mantleaxl32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mapi32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mapistub.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MASetupCleaner.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MCSWE.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MCSWE_X2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfds.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mferror.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfmjpegdec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfplat.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfps.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mfvdsp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MPUSBAPI.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msaudite.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mscms.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msctf.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msdxm.ocx:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\MshtmlDac.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mshtmled.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mshtmlmedia.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msiexec.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msihnd.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msimsg.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msnetobj.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\msobjs.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msorcl32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msrating.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msscp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mstscax.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msv1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msvcr71.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mswsock.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msxml3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msxml3r.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msxml6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\msxml6r.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\mtxoci.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\muzapp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ncrypt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\netbtugc.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\nlsbres.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\notepad.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntdll.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntkrnlpa.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntoskrnl.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntprint.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntprint.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ntvdm64.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\occache.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\oleaut32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\olepro32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\OpenCL.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\phon.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\pintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\polstore.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\poqexec.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\qintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\quick.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\relog.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\rpchttp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\rpcrt4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\rrinstaller.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\samlib.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\scesrv.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\schannel.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\sdbinst.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\sechost.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\secur32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\setup16.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\shimeng.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\spwmp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\srclient.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\sspicli.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\StructuredQuery.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tbs.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tdh.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tintlgnt.ime:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tracerpt.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tsgqec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\TSpkg.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\typeperf.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\tzres.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ubpm.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ucrtbase.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\UIAnimation.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\USB.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\user.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\user32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\usp10.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\vbscript.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\vcamp140.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WcsPlugInService.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wdi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wdigest.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\webcheck.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WebClnt.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\webio.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\win32spl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WindowsCodecs.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\winhttp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wininet.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\winipsec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wintrust.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wmp.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMPhoto.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wmploc.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wmpmde.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wow32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wpdshext.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\ws2_32.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wshrm.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WsmAuto.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WsmRes.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WsmSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wuapi.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wuapp.exe:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wudriver.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\wups.dll:$CmdTcID [130] AlternateDataStreams: C:\windows\SysWOW64\wuwebv.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_10.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_8.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine2_9.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xactengine3_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_0.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_4.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_6.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\XAudio2_7.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xinput1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xinput1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\xinput1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\afd.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\amdacpksd.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\amdkmpfd.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\appid.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ati2erec.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\atikmdag.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\atikmpag.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\bomebus.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\bomemidi.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\bowser.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\CHDRT64.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\cng.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\dfsc.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\disk.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\drmk.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\drmkaud.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\dxgkrnl.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\dxgmms1.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\FWPKCLNT.SYS:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\http.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\iaStorA.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\iaStorF.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\igdkmd64.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\IntcDAud.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ksecdd.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\L1C62x64.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\mountmgr.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\mrxdav.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\mrxsmb.sys:$CmdTcID [130] AlternateDataStreams: C:\windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ndis.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\netbt.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\netio.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\PEAuth.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\portcls.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\rmcast.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\rndismp6.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\srv.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\srv2.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\srvnet.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ssudbus.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\ssudmdm.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\stream.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\SWDUMon.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\tcpip.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\tcpipreg.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\tdx.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\TeeDriverx64.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usb80236.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbaapl64.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\USBAUDIO.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbccgp.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbd.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbehci.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbhub.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbohci.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbport.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\USBSTOR.SYS:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\usbuhci.sys:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\WdfCoInstaller01009.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\WinUSBCoInstaller.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\system32\Drivers\WUDFUpdate_01009.dll:$CmdTcID [64] AlternateDataStreams: C:\windows\SysWOW64\Drivers\dlportio.sys:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\001339076-an-01-pl-RENKFORCE_S1_LED_MOVING_HEAD.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\001339076-an-01-pl-RENKFORCE_S1_LED_MOVING_HEAD.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\10100396899107.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\10100396900148.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\Alleluja~.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\analiza 2 matura próbna 14 15.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\analiza 2 matura próbna 14 15.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\BuddySetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\BuddySetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\CCF20160825_00000.jpg:$CmdTcID [130] AlternateDataStreams: C:\Users\IZA\Downloads\CCF20160825_00000.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\j.pol.xlsx:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\j.pol.xlsx:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\Joanna Handzel - Praca licencjacka.docx:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\Joanna Handzel - Praca licencjacka.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\Magic.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\Magic.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\magicq_windows_v1_7_3_8.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\IZA\Downloads\magicq_windows_v1_7_3_8.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\matura próbna 4Tk 2014 15.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\matura próbna 4Tk 2014 15.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\net_4_5.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\net_4_5.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\plan_wynikowy_ponad_slowami_1_2.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\plan_wynikowy_ponad_slowami_1_2.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\ponad-slowami-1_1_plan-wynikowy.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\ponad-slowami-1_1_plan-wynikowy.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\QuickGuide___A4.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\QuickGuide___A4.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\SGMArtnetConfiguratorSetup_2.0.0.10.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\SGMArtnetConfiguratorSetup_2.0.0.10.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\SGMArtnetConfiguratorSetup_2.0.0.17_Beta.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\SGMArtnetConfiguratorSetup_2.0.0.17_Beta.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\SGM_C5_Installer_v1.3.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\SGM_C5_Installer_v1.3.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\StickMAker_v1.0.0.7.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\StickMAker_v1.0.0.7.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\Wymagania techniczne do spektaklu ZIMOWA PRZYPOGODA.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\wymagania_na_poszczegolne_oceny_ponad_slowami_1_1.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\wymagania_na_poszczegolne_oceny_ponad_slowami_1_1.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\wyniki matury maj2015 120902-0132O-4(1).xls:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\wyniki matury maj2015 120902-0132O-4(1).xls:$CmdZnID [26] AlternateDataStreams: C:\Users\IZA\Downloads\wyniki matury maj2015 120902-0132O-4.xls:$CmdTcID [64] AlternateDataStreams: C:\Users\IZA\Downloads\wyniki matury maj2015 120902-0132O-4.xls:$CmdZnID [26] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\windows\system32\notepad.exe "%1" ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: Urządzenie nie jest podłączone do internetu. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja wyłączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{B1D8744D-4C7B-4647-AD97-423E34D3FD56}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{0BDB4232-0C7E-4E7D-B0C9-D0F8B5110D21}] => (Allow) LPort=2869 FirewallRules: [{8661FCAE-6970-43DC-94EF-B538AF00ADA8}] => (Allow) LPort=1900 FirewallRules: [{29A88892-5376-4360-BB0B-7421784A529D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{500BB8CB-2EC7-490A-B162-7B0E8283AC8C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{7B71C521-40BE-4611-94AF-04F41F70DBF4}] => (Allow) C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe FirewallRules: [{B494241A-BF9B-484A-9F44-66B614C61834}] => (Allow) C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe FirewallRules: [{3B0BBBFD-EC8B-4FAC-B331-68C87F8E2A9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B0A7001B-0011-4CB5-89C1-A8CF129438D7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{11F6296C-BBE3-42B2-84D7-852F0B15672A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{228FFA9C-694B-456C-9D3B-7B82F981808D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B36A4380-22E9-4B2F-AC96-06204765B99A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{64EA55BC-3D48-4A56-90B3-9234F70BE2A2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A629ADA2-D059-45E5-8F61-C639A6499057}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{363C26E3-EB4D-46B0-9C38-C5CEBDFF953F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{57E4CEA8-6241-4FFD-B121-C511A2AA7242}] => (Allow) C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe FirewallRules: [{8D0C5E48-9492-4B60-9563-BE10BDD56B26}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{98F6908D-279C-4410-BA09-77B2C45931E0}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{FA618AB4-F386-4D08-BD6D-C5D0CB58BE10}] => (Allow) C:\Program Files (x86)\Projector Tools\LiveViewer6\LiveViewer.exe FirewallRules: [{EC5B9D6A-D7C2-40CC-A09C-F138460939A6}] => (Allow) C:\Program Files (x86)\Projector Tools\LiveViewer6\Presenter.exe ==================== Punkty Przywracania systemu ========================= 17-04-2017 14:38:24 Installed COMODO Secure Shopping 17-04-2017 14:39:47 Installing COMODO Internet Security Premium 17-04-2017 14:41:00 Instalacja pakietu sterownika urządzenia: COMODO Usługa sieciowa 17-04-2017 15:53:14 po instalacji dot2 i comodo 20-04-2017 16:02:04 instal EAC 23-04-2017 20:21:06 Installed Lightjams 25-04-2017 23:50:24 Installed Bernd Ott's Midi to Art-Net converter ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (05/01/2017 06:31:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/01/2017 06:09:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (05/01/2017 06:03:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/01/2017 05:59:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (05/01/2017 05:55:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/01/2017 03:27:40 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (05/01/2017 03:01:13 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\Native Instruments\Traktor 2\x86\Traktor.exe". Nie można odnaleźć zestawu zależnego Resources32,processorArchitecture="x86",type="win32",version="2.11.0.23". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (05/01/2017 02:52:35 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (05/01/2017 02:47:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (04/30/2017 06:26:13 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Dziennik System: ============= Error: (05/01/2017 06:29:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi PLAY INTERNET. OUC z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (05/01/2017 06:29:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą PLAY INTERNET. OUC. Error: (05/01/2017 06:29:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi DriverLINX Port I/O Driver z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (05/01/2017 06:29:43 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Ładowanie sterownika \SystemRoot\SysWow64\Drivers\DLPortIO.SYS zostało zablokowane z powodu niezgodności z tym systemem. Skontaktuj się z dostawcą oprogramowania w celu uzyskania zgodnej wersji sterownika. Error: (05/01/2017 06:29:22 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 18:28:17 na ‎2017-‎05-‎01 było nieoczekiwane. Error: (05/01/2017 06:02:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi PLAY INTERNET. OUC z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (05/01/2017 06:02:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą PLAY INTERNET. OUC. Error: (05/01/2017 06:02:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi DriverLINX Port I/O Driver z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (05/01/2017 06:02:07 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Ładowanie sterownika \SystemRoot\SysWow64\Drivers\DLPortIO.SYS zostało zablokowane z powodu niezgodności z tym systemem. Skontaktuj się z dostawcą oprogramowania w celu uzyskania zgodnej wersji sterownika. Error: (05/01/2017 05:55:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi PLAY INTERNET. OUC z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. CodeIntegrity: =================================== Date: 2017-05-01 18:29:40.498 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:29:40.482 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:29:40.420 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:12:39.778 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:12:39.751 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:12:39.669 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:02:03.288 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:02:03.273 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 18:02:03.210 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-01 17:54:11.509 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz Procent pamięci w użyciu: 43% Całkowita pamięć fizyczna: 4039.86 MB Dostępna pamięć fizyczna: 2280.56 MB Całkowita pamięć wirtualna: 8077.9 MB Dostępna pamięć wirtualna: 6073.24 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:147.62 GB) (Free:36.05 GB) NTFS Drive d: (Nowy) (Fixed) (Total:303.19 GB) (Free:140.96 GB) NTFS Drive f: () (Removable) (Total:29.71 GB) (Free:13.29 GB) FAT32 Drive g: (PLAY INTERNET) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 98837B9C) Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=147.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=303.2 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=14.8 GB) - (Type=12) ======================================================== Disk: 1 (Size: 29.7 GB) (Disk ID: 00000000) Partition: GPT. ==================== Koniec Addition.txt ============================