Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015 Ran by Dell at 2016-02-10 14:41:08 Running from C:\Users\Dell\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-607335060-1145667579-176818443-500 - Administrator - Disabled) Dell (S-1-5-21-607335060-1145667579-176818443-1000 - Administrator - Enabled) => C:\Users\Dell Gość (S-1-5-21-607335060-1145667579-176818443-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-607335060-1145667579-176818443-1003 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: COMODO Antivirus (Enabled - Up to date) {F25D0092-CDBE-B303-ADB7-88DE8CDECCF5} AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Enabled) {CA6681B7-87D1-B25B-86E8-21EB720D8B8E} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated) Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation) BitComet 1.37 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.37 - CometNetwork) ByteFence Anti-Malware (HKLM-x32\...\ByteFence) (Version: 2.1.1.0 - Byte Technologies LLC) Candy Maze PL wersja 4.5.0.149807 (HKLM-x32\...\{56FBC040-A3BB-48B5-9054-4A686724F745}_is1) (Version: 4.5.0.149807 - Alawar) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP) Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 46.9.15.425 - Comodo) COMODO Internet Security Premium (HKLM\...\{18F14F4B-D8A9-4309-817E-3BC0B7664E53}) (Version: 8.0.0.4344 - COMODO Security Solutions Inc.) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.2.5.930 - Foxit Software Inc.) Free Disc Burner version 3.0.20.325 (HKLM-x32\...\Free Disc Burner_is1) (Version: 3.0.20.325 - DVDVideoSoft Ltd.) GeekBuddy (HKLM\...\{266FA04F-F0FA-4F7A-AA1E-387A57F579F2}) (Version: 4.19.131 - Comodo Security Solutions Inc) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Officejet 4620 series — badanie mające na celu poprawę produktów (HKLM\...\{2064278A-271B-4E3D-8A0D-2FC9CE596C73}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet 4620 series — podstawowe oprogramowanie urządzenia (HKLM\...\{AB7F1F84-62FC-4FDF-8B9A-7E2E6A563A8D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet 4620 series Pomoc (HKLM-x32\...\{D9C20619-2B3B-4ABF-B0FF-73BA66305B45}) (Version: 6.0.0 - Hewlett Packard) HP Photo Creations (HKU\S-1-5-21-607335060-1145667579-176818443-1000\...\HP Photo Creations) (Version: 1.0.0.18332 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation) Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHAREit (HKLM-x32\...\SHAREit_is1) (Version: 2.1.19.0 - Lenovo Group Limited) VCRedistSetup (x32 Version: 1.0.0 - Nero AG) Hidden Visualizer Photo Resize (HKLM-x32\...\{838F0053-8744-4B63-8819-CC44C06308AC}) (Version: 3.00.0000 - Visualizer Image Group) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) WinRAR 5.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) YTD Video Downloader 5.1.0 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.1.0 - GreenTree Applications SRL) <==== ATTENTION ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 04-02-2016 18:09:46 Zaplanowany punkt kontrolny 08-02-2016 17:12:28 Instalacja pakietu sterownika urządzenia: Visicom Media Inc. Urządzenia do obrazowania 08-02-2016 17:13:59 Instalacja pakietu sterownika urządzenia: Visicom Media Inc. Kontrolery dźwięku, wideo i gier 09-02-2016 22:16:19 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2016-02-10 13:16 - 00002024 ____A C:\Windows\system32\Drivers\etc\hosts 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com 0.0.0.0 cdn.insta.playbryte.com 0.0.0.0 cdn.llogetfastcach.us 0.0.0.0 cdn.montiera.com 0.0.0.0 cdn.msdwnld.com 0.0.0.0 cdn.mypcbackup.com 0.0.0.0 cdn.ppdownload.com 0.0.0.0 cdn.riceateastcach.us 0.0.0.0 cdn.shyapotato.us 0.0.0.0 cdn.solimba.com 0.0.0.0 cdn.tuto4pc.com 0.0.0.0 cdn.appround.biz 0.0.0.0 cdn.bigspeedpro.com There are 5 more lines. ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0718CD06-7CF2-4625-A8D1-11660252C0FC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2016-01-29] (Microsoft Corporation) Task: {14CD81BD-4D41-4174-93DC-7D6038015FCE} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO) Task: {14DE21C6-6C02-47C6-8616-C855B34466D5} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [2016-02-01] (Byte Technologies LLC) Task: {151777A4-2E4B-407A-9E17-BDC34618BA36} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {254A5AB8-3692-4ECA-BBD3-FBA123EF3F3D} - System32\Tasks\{06F346E0-3312-E957-240F-BEB34C2A21DC} => C:\Windows\system32\WindowsPowershell\v1.0\powershell.exe [2009-07-14] (Microsoft Corporation) Task: {31BC263F-B8F5-4E6E-BE8F-0517885686EB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2016-01-29] (Microsoft Corporation) Task: {340F783A-93D4-427F-8F8F-09D7A7CA79F9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {35F2A0AD-B5CE-4250-A69C-54E47F96597B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.) Task: {398F3C0F-F5ED-42AC-B6C2-1C596D2070F9} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\compattelrunner.exe [2016-01-29] (Microsoft Corporation) Task: {3A5E351B-ABA7-40EE-9BB8-A39152172B94} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.) Task: {3EE5EA8D-9C28-4CF4-80A6-B81F4757BD5E} - System32\Tasks\Price Fountain => C:\Users\Dell\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {456AB111-5EA7-4753-B7BB-532A8C1E03B6} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-03-11] () Task: {456C1A26-C8DE-4B1C-BD9B-EF6B398C29D5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-URT => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {542CC37D-58E3-42B6-BB0B-69C053964CBD} - System32\Tasks\DellEntreatinglyHomagingV2 => Rundll32.exe MotifsCagy.dll,main 7 1 Task: {69EF0AE5-B6AB-4906-82B0-49735198AE17} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [2015-03-11] (Hewlett-Packard Co.) Task: {7348C25D-5BFE-4751-8DB4-1D2A87176965} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO) Task: {80250FA1-7AC4-4E15-8991-C40662B0D76B} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe [2016-02-01] (Byte Technologies LLC) Task: {80DEC309-EC97-4192-9F68-E9E5EA16848B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => C:\Windows\system32\GWX\GWXConfigManager.exe [2016-01-29] (Microsoft Corporation) Task: {956B740A-351E-46D7-9E6F-85944F6E21BB} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO) Task: {95FCCF8C-8C0E-494D-B16C-048FE856063A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-5d => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {967F612A-F5FC-4265-95C3-096C5A10AF2C} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2016-01-29] (Microsoft Corporation) Task: {A12A8F90-96B9-40EA-AD95-23989DD5184B} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO) Task: {B2C3F3E6-0DE2-469E-A643-D61EA4245539} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {B964F389-1379-4532-9C6D-E62D4D982B4E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2016-01-29] (Microsoft Corporation) Task: {BBA57EBF-1615-454C-B273-4277B11B1A62} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {BFBB2CB7-CC0D-416E-9FCF-162677F9663C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2016-01-29] (Microsoft Corporation) Task: {C4A77327-64E1-4895-8E9D-7D4D08B1EC32} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-14] (COMODO) Task: {E8FC37F2-7B87-4062-8CC5-631230E996B2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => C:\Windows\system32\GWX\GWX.exe [2016-01-29] (Microsoft Corporation) Task: {F0B5CB74-57B4-48C3-987D-3A2D0A212A77} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-03-11] (Lenovo) Task: {F64F0945-1172-4848-87D7-D696039A057F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2016-01-29] (Microsoft Corporation) Task: {FC4E51A7-52FF-4F9F-9965-4F86F6417BB3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-01-15] (Adobe Systems Incorporated) Task: {FD9841E9-C429-4AE7-899C-619D9348DC3D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Price Fountain.job => C:\Users\Dell\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ==================== Loaded Modules (whitelisted) ============== 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2016-02-01 12:40 - 2016-02-01 12:40 - 00244664 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe 2016-02-01 12:40 - 2016-02-01 12:40 - 00553912 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe 2013-04-15 17:39 - 2015-01-08 23:02 - 00067808 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav 2016-02-06 09:12 - 2016-02-03 08:33 - 29251912 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\autoexec.bat:$CmdTcID AlternateDataStreams: C:\Windows\bfsvc.exe:$CmdTcID AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID AlternateDataStreams: C:\Windows\notepad.exe:$CmdTcID AlternateDataStreams: C:\Windows\splwow64.exe:$CmdTcID AlternateDataStreams: C:\Windows\twain_32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aaclient.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\accessibilitycpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\acppage.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ActionCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ActionCenterCPL.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ActionQueue.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\actxprxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\AdmTmpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\adprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\aitagent.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\amstream.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\appwiz.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\asycfilt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\AuthFWSnapin.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\autochk.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\autoconv.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\autofmt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\autoplay.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\AuxiliaryDisplayCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\AuxiliaryDisplayServices.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\AxInstSv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\azroles.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\azroleui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\AzSqlExt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\basecsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\basesrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\batmeter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\bcdboot.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\bcdsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\BFE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\biocpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\bitsadmin.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\bitsperf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\BlbEvents.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\bootres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\browcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\browser.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\browseui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\bthprops.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\Bubbles.scr:$CmdTcID AlternateDataStreams: C:\Windows\system32\BWUnpairElevated.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cabinet.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cabview.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\capiprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cca.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cdosys.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\certcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\certenc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\CertEnroll.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\certmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\CertPolEng.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\certprop.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\certutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cfgmgr32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\change.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\chglogon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\chgport.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\chgusr.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\choice.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\clusapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cmd.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\cmstp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\cngprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\comdlg32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\credui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cryptdlg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscdll.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\CscMig.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscobj.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscript.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\cscui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\C_ISCII.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\d2d1.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\d3d11.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\d3d9.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dbgeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dbghelp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\defaultlocationcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\desk.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DeviceCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DevicePairingFolder.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dfrgui.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\dfshim.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dhcpcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dhcpcore6.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dhcpcsvc6.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DiagCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\diagperf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dimsroam.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\diskpart.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\diskraid.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\Display.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\djoin.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\dnsapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dnscacheugc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\dnscmmc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dnsrslvr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dot3api.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dot3cfg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dot3msm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dot3svc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dot3ui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dpapiprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dpnaddr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dpnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dps.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dpx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\drvstore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dsauth.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DShowRdpFilter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dskquoui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dsuiext.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dwmcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dwmredir.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dxdiagn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DXP.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DXPTaskRingtone.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\DxpTaskSync.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\eapp3hst.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\eapphost.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\efscore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\EhStorAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\elsTrans.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\esent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\eudcedit.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Faultrep.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fde.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fdeploy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fdProxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\findstr.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\FirewallControlPanel.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\fms.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fontext.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fphc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\framedyn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\framedynos.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\fsutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ftp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\FWPUCLNT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSCOVER.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSMON.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSSVC.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSTIFF.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\FXSUNATD.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\g711codc.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\gpprefcl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\gpsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hal.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hbaapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hgcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hgprint.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\HotStartUserAgent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hpinkcoi6412.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\hpinkins6412.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\hpinksts6412LM.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\HPScanTRDrv_OJ4620.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\HPWia2_OJ4620.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\HPZLLLHN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\HPZLLWN7.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\httpapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iasacct.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iasrad.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iasrecst.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\IcCoinstall.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ifsutil.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\IKEEXT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\imagehlp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\imapi2.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\imapi2fs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\inetmib1.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\inetpp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\intl.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\IPHLPAPI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\iphlpsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iprtrmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\IPSECSVC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\ipsmsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iscsicli.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\iscsium.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\isoburn.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\itircl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iTVData.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\iyuv_32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\jnwmon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDBASH.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDBLR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDBULG.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDCZ1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDGEO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDGKL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDGR1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINBEN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINHIN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINKAN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINMAR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINORI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINTAM.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDINTEL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\kbdlk41a.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDLT1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDMAORI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDMON.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDNEPR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDPO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDRU.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDRU1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDSF.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDSG.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDTAJIK.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDTAT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDTUF.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDTUQ.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDTURME.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDUGHR1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDUS.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\KBDYAK.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\KMSVC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\kstvtune.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Kswdmcap.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\ksxbar.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\ListSvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\localsec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\logoff.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\logoncli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\LogonUI.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\lpksetup.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\lsm.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\lsmproxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\luainstall.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\main.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\manage-bde.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mblctr.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mcbuilder.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\MCEWMDRMNDBootstrap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mciqtz32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mcupdate_GenuineIntel.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Mcx2Svc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MdSched.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\MediaMetadataHandler.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfc42.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfc42u.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfds.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MFPlay.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfreadwrite.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\mimefilt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mmcndmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mmsys.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\mobsync.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\Mpeg2Data.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\mpg2splt.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\mprapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mprddm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MPSSVC.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MSAC3ENC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\msasn1.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mscms.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msconfig.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mscoree.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mscorier.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mscories.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msdmo.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msdri.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msdrm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msdtctm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MSDvbNP.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msftedit.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msieftp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msinfo32.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MSNP.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mspbda.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msrle32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msscntrs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mssph.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mssphtb.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mssrch.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mssvp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mstask.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msvcrt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msvidc32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MSVidCtl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msxml6.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msyuv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\mtxclu.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\muifontsetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\MultiDigiMon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\mydocs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Mystify.scr:$CmdTcID AlternateDataStreams: C:\Windows\system32\NAPCRYPT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\napdsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\NAPHLPR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\Narrator.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\NaturalLanguage6.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nci.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ncryptui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ncsi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\net1.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\netapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netcenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netcfgx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netcorehc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netdiagfx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netevent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netfxperf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netid.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netiohlp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netjoin.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netlogon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netplwiz.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netshell.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\netutils.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\networkexplorer.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\networkmap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nlaapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nltest.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\notepad.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\nrpsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nshipsec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nshwfp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\nslookup.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntlanman.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntprint.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntshrui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\objsel.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ocsetapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ocsetup.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbc32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbcconf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbccp32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbccr32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbccu32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\odbctrac.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ole32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\oleacc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\onex.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\onexui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OnLineIDCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OobeFldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\OpcServices.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\osk.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\packager.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\pdh.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PerfCenterCPL.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\perfmon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PhotoScreensaver.scr:$CmdTcID AlternateDataStreams: C:\Windows\system32\photowiz.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\pifmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PkgMgr.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\pla.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\pnidui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PnPUnattend.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\PortableDeviceApi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PortableDeviceStatus.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PortableDeviceSyncProvider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\powercfg.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\powercpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PresentationHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\PresentationHostProxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PresentationSettings.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\prevhost.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\PrintIsolationProxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\printui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\prncache.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\prnfldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\prntvpt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\profprov.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\propsys.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\proquota.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\provsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\puiobj.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\PushPrinterConnections.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\QAGENT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\QAGENTRT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\qappsrv.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\qcap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\QCLIPROV.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\qdv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\qmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\qprocess.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\QSHVHOST.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\QSVRMGMT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Query.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\query.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\QUTIL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\RacEngn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\raschap.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rasmans.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rasppp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpcfgex.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpclip.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpcorekmts.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpd3d.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpdd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\RDPENCDD.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpencom.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpendp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdprefdrvapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdpwsx.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rdrmemptylst.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ReAgent.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\recdisc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\recovery.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\regapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\remotepg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\repair-bde.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\reset.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\Ribbons.scr:$CmdTcID AlternateDataStreams: C:\Windows\system32\riched20.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\riched32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\RMActivate.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\RMActivate_isv.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\RMActivate_ssp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\RMActivate_ssp_isv.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\Robocopy.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\rpchttp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\RpcRtRemote.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rpcss.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\rtutils.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\runonce.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\rwinsta.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\samcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\samsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sbe.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\scansetting.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\scecli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\schedcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\schtasks.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\scrptadm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\scrrun.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\sdclt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\sdcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sdengin2.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sdrsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SearchFilterHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\SearchFolder.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SearchIndexer.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\SearchProtocolHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\seclogon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\secproc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\secproc_isv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\secproc_ssp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\secproc_ssp_isv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SensorsCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\services.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\SessEnv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sethc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\setupapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\setupcl.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\shacct.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shadow.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\sharemediacpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shgina.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shimgvw.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shlwapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shsetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shsvcs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shunimpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\shwebsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sisbkup.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\slui.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\slwga.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SmartcardCredentialProvider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SmiEngine.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\SndVol.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\SndVolSSO.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spbcd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spinstall.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\spoolsv.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\spopk.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppcomapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppnp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppobjs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppsvc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\sppwinob.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spreview.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\spwizeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spwizres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spwizui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sqlcese30.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sqlsrv32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sqmapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srchadmin.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srrstr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srvcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\srvsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sscore.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ssText3d.scr:$CmdTcID AlternateDataStreams: C:\Windows\system32\stobject.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\StructuredQuery.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sud.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sxs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\SyncCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\syncui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sysclass.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sysdm.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\sysmon.ocx:$CmdTcID AlternateDataStreams: C:\Windows\system32\syssetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\systemcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\t2embed.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tabcal.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\TabletPC.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\TabSvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\takeown.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\tapisrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\taskbarcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\taskcomp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\taskeng.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\taskmgr.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\taskschd.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tcpipcfg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\termmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\termsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\themecpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\themeui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\thumbcache.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\timedate.cpl:$CmdTcID AlternateDataStreams: C:\Windows\system32\tlscsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tquery.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\TRAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tsbyuv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tscfgwmi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tscon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\tsdiscon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tskill.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\tsmf.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\TsUsbGDCoInstaller.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\TSWorkspace.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\twext.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\tzutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\ucrtbase.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\UIRibbon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\UIRibbonRes.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\umb.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\umpnpmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\umrdp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\unimdm.tsp:$CmdTcID AlternateDataStreams: C:\Windows\system32\unimdmat.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\untfs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\upnp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\UserAccountControlSettings.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\usercpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\userenv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\userinit.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\uxlib.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\VAN.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Vault.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\VBICodec.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\vbisurf.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vds.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\vdsbas.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vdsutil.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vfwwdm32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\VmbusCoinstaller.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmbuspipe.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmbusres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\VmdCoinstall.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmicres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmicsvc.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmictimeprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vmstorfltres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vpnike.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vpnikeapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\vssapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\VSSVC.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\vss_ps.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WavDest.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wavemsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wbemcomn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wbengine.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wcncsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wdc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01009.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Wdfres.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wdiasqmmodule.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wdmaud.drv:$CmdTcID AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\webservices.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wer.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\werconcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WerFaultSecure.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wevtsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WFS.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wiadefui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wiaservc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wiavideo.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\wincredprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WindowsAnytimeUpgradeResults.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\winhttp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID AlternateDataStreams: C:\Windows\system32\winlogon.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID AlternateDataStreams: C:\Windows\system32\WinSAT.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\WinSATAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WinSCard.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\winspool.drv:$CmdTcID AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\winsta.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WinUSBCoInstaller2.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wisptis.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wkscli.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wksprt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wkssvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wlangpui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wlanmsm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wlanpref.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wlanui.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Wldap32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmdrmdev.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmdrmnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmicmiplugin.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMNetMgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpdxm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpeffects.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMPEncEn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpps.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpshell.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wmpsrcwp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVCORE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wpccpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wpdbusenum.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wpdshext.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WPDShServiceObj.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\WPDSp.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wpdwcn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wpd_ci.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\ws2_32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wscapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wscript.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\WSDApi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wsdchngr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wshbth.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wshirda.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wshom.ocx:$CmdTcID AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wsnmp32.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wsqmcons.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\WSTPager.ax:$CmdTcID AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wusa.exe:$CmdTcID AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wwanconn.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wwanprotdim.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\wwansvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\xmllite.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\XpsRasterService.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\xpsservices.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\zipfldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\aaclient.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\accessibilitycpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\acppage.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ActionCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ActionCenterCPL.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\activeds.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\actxprxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\AdmTmpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\adprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\adsldp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\amstream.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\anim.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\appmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\appwiz.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\asycfilt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\audiodev.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\AuthFWSnapin.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\autochk.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\autoconv.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\autofmt.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\autoplay.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\avifil32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\azroles.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\azroleui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\AzSqlExt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\basecsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\batmeter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\bitsadmin.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\bitsperf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\browcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\browseui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\bthprops.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Bubbles.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cabinet.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cabview.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\calc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\capiprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cca.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cdosys.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\certcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\certenc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\CertEnroll.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\certmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\CertPolEng.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\certutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cfgmgr32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\clusapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cmd.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cmstp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cngprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\comdlg32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\credui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cryptdlg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cscapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cscdll.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cscobj.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\cscript.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\C_ISCII.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d2d1.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d3d10warp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d3d11.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d3d9.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dbghelp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\defaultlocationcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\desk.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DeviceCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DevicePairingFolder.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\devobj.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\devrtl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dfrgui.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dfshim.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore6.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dhcpcsvc6.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dimsroam.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\diskpart.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\diskraid.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Display.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dnsapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dnscacheugc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dnscmmc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dot3api.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dot3cfg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dot3msm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dot3ui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dpapiprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dpnaddr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dpnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dpx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\drvinst.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\drvstore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dsauth.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DShowRdpFilter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dskquoui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dsuiext.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dxdiagn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DXPTaskRingtone.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\DxpTaskSync.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\eapphost.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\efscore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\EhStorAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\elsTrans.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\esent.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\eudcedit.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Faultrep.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fde.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fdeploy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\findstr.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\FirewallControlPanel.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fms.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fontext.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fphc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\framedyn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\framedynos.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\fsutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ftp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\FWPUCLNT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\g711codc.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\gdiplus.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\GPhotos.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\gpprefcl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\hbaapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\hgcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\httpapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iasacct.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iasrad.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iasrecst.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iccvid.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ifsutil.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\imagehlp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\imapi2.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\imapi2fs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\imm32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\inetmib1.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\intl.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\IPHLPAPI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iprtrmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ipsmsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iscsicli.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iscsium.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\isoburn.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\itircl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iTVData.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\iyuv_32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDBASH.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDBLR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDBULG.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDCZ1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDGEO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDGKL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDGR1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINBEN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINHIN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINKAN.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINMAR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINORI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINTAM.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDINTEL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\kbdlk41a.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDLT1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDMAORI.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDMON.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDNEPR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDPO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDRU.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDRU1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDSF.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDSG.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDTAJIK.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDTAT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDTUF.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDTUQ.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDTURME.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDUGHR1.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDUS.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KBDYAK.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\kstvtune.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Kswdmcap.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ksxbar.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\localsec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\logagent.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\logoncli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\lsmproxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\luainstall.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\main.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mcbuilder.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mciavi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mciqtz32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MediaMetadataHandler.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfc40.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfc40u.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfc42.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfc42u.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfds.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MFPlay.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfreadwrite.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\migisol.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mimefilt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mmcndmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MMDevAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mmsys.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mobsync.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Mpeg2Data.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mpg2splt.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mprapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mprddm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MSAC3ENC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msasn1.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mscms.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mscoree.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mscorier.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mscories.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msdmo.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msdrm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MSDvbNP.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msftedit.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msieftp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msimsg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msinfo32.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MSNP.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msorcl32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msrle32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msscntrs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mssph.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mssphtb.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mssrch.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mssvp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mstask.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msutb.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msvcrt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msvfw32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msvidc32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MSVidCtl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msxml3a.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\msyuv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mtxclu.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\muifontsetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\MuiUnattend.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\mydocs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Mystify.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\NAPCRYPT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\napdsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\NAPHLPR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\NaturalLanguage6.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nci.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ncryptui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\net1.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netbtugc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netcenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netcfgx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netcorehc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netdiagfx.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netevent.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netfxperf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netid.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netiohlp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netiougc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netjoin.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netlogon.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netplwiz.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netshell.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\netutils.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\networkexplorer.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\networkmap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\notepad.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nshipsec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nshwfp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\nslookup.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntlanman.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntprint.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntshrui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\objsel.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\occache.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ocsetapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ocsetup.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbc32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbcconf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbccp32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbccr32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbccu32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbcjt32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\odbctrac.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ole32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\oleacc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\olepro32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\olethk32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\onex.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\onexui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OnLineIDCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OobeFldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\OpcServices.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\osk.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\packager.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pdh.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pdhui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PerfCenterCPL.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\perfmon.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\perfts.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PhotoScreensaver.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\photowiz.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pifmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PkgMgr.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pla.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pmcsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\pnidui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceApi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceStatus.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\powercfg.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\powercpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ppcsnap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PresentationHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PresentationHostProxy.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\prevhost.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\printui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\prncache.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\prnfldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\prntvpt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\propsys.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\proquota.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\provsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\puiobj.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\PushPrinterConnections.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\QAGENT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\qcap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\QCLIPROV.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\qdv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\QSHVHOST.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\QSVRMGMT.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Query.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\QUTIL.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RacEngn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\raschap.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rasppp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rastapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rdpcore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rdpd3d.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rdpencom.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rdpendp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rdprefdrvapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ReAgent.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ReAgentc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\regapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\remotepg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\resutils.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Ribbons.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\riched20.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\riched32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RMActivate.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_isv.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp_isv.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Robocopy.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rpchttp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\RpcRtRemote.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\rtutils.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\runonce.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\samcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sbe.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\scansetting.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\scecli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\schedcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\schtasks.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\scrptadm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\scrrun.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SearchFilterHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SearchFolder.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SearchIndexer.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SearchProtocolHost.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\secproc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\secproc_isv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp_isv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SensorsCpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SessEnv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sethc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\setupapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\setupcln.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\setupugc.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shacct.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shgina.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shimgvw.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shlwapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shsetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shsvcs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shunimpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\shwebsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sisbkup.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\slwga.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SmartcardCredentialProvider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SndVol.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SndVolSSO.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spbcd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spopk.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sppc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sppcomapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sppinst.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spwizeng.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spwizres.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sqlcese30.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sqlsrv32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sqmapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\srchadmin.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\srvcli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sscore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ssText3d.scr:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\stobject.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\StructuredQuery.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sud.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sxs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\SyncCenter.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\syncui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sysdm.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\sysmon.ocx:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\syssetup.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\systemcpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\t2embed.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\takeown.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tapisrv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\taskcomp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\taskeng.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\taskmgr.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\taskschd.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tcpipcfg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tcpmonui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\termmgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\themecpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\themeui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\thumbcache.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\timedate.cpl:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tlscsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tquery.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\TRAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tsbyuv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tsmf.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\TSWorkspace.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\twext.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\tzutil.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ucrtbase.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\UIRibbon.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\UIRibbonRes.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\unicows.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\unimdm.tsp:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\unimdmat.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\unlodctr.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\untfs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\upnp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\UserAccountControlSettings.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\usercpl.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\userenv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\userinit.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\utildll.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\uxlib.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\VAN.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Vault.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\VBICodec.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vbisurf.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vdsbas.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vfwwdm32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vpnikeapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\vssapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\w32tm.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\W95INF16.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\W95INF32.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wavemsp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wbemcomn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wbhelp2.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wbocx.ocx:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wcncsvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wdc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wdmaud.drv:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wdscore.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\webio.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\webservices.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wer.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WerFaultSecure.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wiadefui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wiavideo.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wimgapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wimserv.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wincredprovider.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\winhttp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\winmm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WinSATAPI.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WinSCard.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\winspool.drv:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\winsta.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wkscli.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wlangpui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wlanmsm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wlanpref.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wlanui.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\Wldap32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmdrmdev.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmdrmnet.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMNetMgr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpdxm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpeffects.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMPEncEn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpps.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpshell.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wmpsrcwp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVCORE.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WPDShServiceObj.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WPDSp.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wpdwcn.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\ws2_32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wscapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wscript.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WSDApi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wsdchngr.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wshbth.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wshirda.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wshom.ocx:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wsnmp32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\WSTPager.ax:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wtsapi32.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wusa.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\wvc.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\xmllite.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\XpsRasterService.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\xpsservices.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\zipfldr.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\1394ohci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\acpi.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\acpipmi.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\amdsata.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\amdxata.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ataport.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\cdrom.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\Classpnp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\CompositeBus.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\csc.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\dfsc.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\fltMgr.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\fvevol.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\FWPKCLNT.SYS:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\hdaudbus.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\HdAudio.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\hidclass.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\hidparse.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\hidusb.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\HpSAMD.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\hwpolicy.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\iaStorV.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ipfltdrv.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\IPMIDrv.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\kbdhid.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ks.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mpio.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\msahci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\msdsm.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\msrpc.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ndisuio.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ndiswan.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ndproxy.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\netbt.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\netio.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\ntfs.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\nvraid.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\nvstor.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\pacer.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\pci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rasl2tp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\raspptp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rdbss.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rdpdr.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rdpwd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rdyboost.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\RNDISMP.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\sbp2port.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\scfilter.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\scsiport.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\sffp_sd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\storvsc.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\stream.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tcpip.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tcpipreg.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tdi.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tdtcp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\termdd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tssecsrv.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\TsUsbFlt.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\tunnel.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\udfs.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\umbus.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usb8023.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\USBCAMD2.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbccgp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbcir.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbd.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbehci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbhub.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbohci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbport.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbrpm.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\USBSTOR.SYS:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\usbuhci.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\vhdmp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\vmbus.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\VMBusHID.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\vms3cap.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\vmstorfl.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\volmgr.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\volmgrx.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\volsnap.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\wanarp.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\Wdf01000.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\WdfLdr.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\winhv.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\winusb.sys:$CmdTcID AlternateDataStreams: C:\Users\Dell\Desktop\Media Player Classic.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Desktop\Wtornik_282287746.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\00-duplikat-legitymacji.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\1009012_319076328224777_1206095590_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\1011593_768036113214545_4875991870102507494_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10333385_569086199890454_2285172763214183883_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10347536_868848296466659_6333572069641554011_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10390545_1114498415228090_163230146766811805_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10464018_812155588802597_4270662496890131794_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10494703_452237238282612_2833597995004753375_n.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10665117_868848923133263_2832868070516217251_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10830688_805054332877879_7818177889847579652_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10945855_805054372877875_6675006385918923368_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10955692_805054596211186_5991271450621174473_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10974285_766266336755664_8657242778788515416_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\10987629_606361732841226_10440465342815812_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\11225916_895822977123203_1734208227_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\1240452_765774380107385_724178207_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\12473776_1120616357969111_4410139629994981815_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\1618430_769169423101214_678469958309714428_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\16625151_E_Faktura_20150321.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\16634952_Faktura_20150321.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\194733_285116091553069_61799832_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\201149_411077282290282_1045247872_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\2574.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\290292_194591557339922_371989973_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\315009_344111545679149_377978256_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\378588_344110452345925_2061171087_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\4.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\413016_285116824886329_153135417_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\417033_285118074886204_119843748_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\50 Cent - CandleWick 2 2016 [mp3 241-320kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\527874_344110369012600_1936196098_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\545315_490375094313983_1873119598_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\552090_344109972345973_857534572_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\552131_344110225679281_1993929307_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\576733_335230276541650_1544256072_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\620868_411077438956933_232433507_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\622625_210764145722663_415047007_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\905605_1014684695239964_5086505521511801417_o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\91_12_2015.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\946106_868850556466433_8663847471432416807_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\970031_617894844895340_415109707_n.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\971213_442374639242271_1061556442_n.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\AdwCleaner.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\AdwCleaner.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Artificial flowers - kwiaty całoroczne (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Artificial flowers - kwiaty całoroczne.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Artyk2669-1.docx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\autorun.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\autorun.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\autorun.inf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\BitComet_1.37_x64_setup.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\BitComet_1.37_x64_setup.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Browser Cleaner 2.0.8.1.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\bukiet 1 (1).htm:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\bukiet 1.htm:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Bulgaria.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\cennik-uslug-brukarskich.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\cennik_transport-2011-10-20.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Ceramic Vases - Ceramika.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Cesarz Narodziny Państwa Środka.iso:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\ChomikBox.msi:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Chris Brown - Royalty 2015 [Deluxe Edition] [Flac][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\ChromeSetup (1).exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\ChromeSetup (1).exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\chłopaki.zip:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\cispremium_installer.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\cispremium_installer.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\CV Tomek - nowe.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\cv_2.zip:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DEKLARACJA 1.DOC:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DEKLARACJA 1.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Dolska Ela.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Dolska Mery 1.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Dolska Mery 2.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\drukiWplat (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\drukiWplat.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\drukPrzelewu.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC02813.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC06064.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC06517.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC06662.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC06917.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC07170.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\DSC07513.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Faktura 00002-11-2015 - Tomasz Czubek.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\florysta-informacje_o_egzaminie2.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Flowers in glass - Kwiaty w szkle (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Flowers in glass - Kwiaty w szkle.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\formularz_reklamacji.odt:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\frankiewicz korekta za 2013 r..pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Free Disc Burner 3.0.20.325 [1].exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\FRST64_02.5.2015.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\FRST64_02.5.2015.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Glassware - Wyroby ze szkła cz.1 (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Glassware - Wyroby ze szkła cz.1.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Glassware - Wyroby ze szkła cz.2 (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Glassware - Wyroby ze szkła cz.2.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\GranStore cennik 2015.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Grecja-Paralia.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Hiszpania SK (1).doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Hiszpania SK.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Informacje od sprzedającego.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\informator_Z016_343203_FL.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Inne_UMOWA_GRUDZIEŃ.odt:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\installer.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\installer.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\is151setup.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\is151setup.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Jarek i Mariusz.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Jarosław Matysiak 1.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\JavaSetup [1].exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\JavaSetup.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Jazz_Cartier_-_Hotel_Paranoia__ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Justin Timberlake - Mirror (Audio).mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Justin Timberlake - Sexy Back.mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Justin Timberlake - Suit & Tie (Audio) ft. JAY Z.mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\k,MzU3OTUyMTksNTQ2NjU2,f,Lalka_-_streszczenie_szczegolowe.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Kajaki Piława 2014 066.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Kaoma - Lambada.mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\KARTA_uczestnict.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\katalog_Meriva_MY15_5.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Kevin_Gates_-_Islah_ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\LION_BABE_-_Begin_ 2016 _[mp3 320][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\lista za energię.odt:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Lista zaległości na 31-12-2015 (1).odt:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Lista zaległości na 31-12-2015 (1).odt:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Lucifer_ 2016 _[S01E01]_[WEB-DL]_[XviD-DeiX]_[Lektor_PL]_[AgusiQ][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Mariusz Nejman 1.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Mark It Now Lite 1.1 [1].exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Mark It Now Lite 1.1.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Mark It Now Lite 1.1.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Maroon 5 - Sugar.mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Materiały niezbędne do wykonania florysta.docx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\MC Hammer - U Cant Touch This.mp3:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Media Player Classic PL 6.4.9.1 [1].exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Nick_Grant_-_ 88__ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Ninite Foxit Reader Installer.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Ninite Foxit Reader Installer.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\oboz.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Oferta wynajmu BUNGALOW Tomasz Czubek koniec lipca 2016.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\OJ4620_1315-1.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\OJ4620_1315-1.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Oliwier Szyszka.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\OswZKrawczyk2015.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\P1160911.JPG:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\PD-_Zadanie_domowe_-_operacje_bazodanowe_w_arkuszu_ALL.zip:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Pola Szyszka.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\poprawność danych 1.xlsx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\poradnia_naczyniowa.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\poradnia_ortopedyczna.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\pozew_o_alimenty.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\przesyłka_DHL_Express_44648358843.zip:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\R Kelly - The Buffet [Deluxe] 2015 [mp3 320][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Ray_Jr_-_Gold_Packs_ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Rihanna - ANTI [Deluxe] 2016 [mp3 320][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Rihanna 01.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Rihanna 02.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\r_26_00_praktyczny_www.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\r_26_2015_01_X_k.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\sala.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan0001.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan0002.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan0101 (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan0101 (2).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Scan0101.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Sicko_Mobb_-_Super_Saiyan_Vol _3_ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\smime (1).p7s:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\smime.p7s:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\SpyHunter-Installer.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\SpyHunter-Installer.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Straight_Outta_Compton_ 2015 _[BDRip]_[XviD-KiT]_[Lektor_PL]_[verbatim][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\SystemLook (1).txt:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\SystemLook_x64.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\SystemLook_x64.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Szablon CV1 od praca.gratka.pl.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Tank_-_Sex_Love_And_Pain_II_ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\testy.zip:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\The_Shannara_Chronicles_ 2016 _[S01E06]_[HDTV]_[XviD-AX2]_[Napisy_PL]_[AgusiQ][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Trae_Tha_Truth_-_Tha_Truth _Pt _2__ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Trick_Trick_-_Outlaw__ 2016 _[MP3 320_kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\umowa p.Sobolewska (1).doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\umowa p.Sobolewska (2).doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\umowa p.Sobolewska.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\VA - Silver Voice RnB Dolce Boom 2016 [MP3 320 kbps][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Veronica_Rodriguez_ _Ramon_Nomar Evil_Squirters [ mp4][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\visualizer_photo_resize.exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\visualizer_photo_resize.exe:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\VLC Media Player 2.1.5 [1].exe:$CmdTcID AlternateDataStreams: C:\Users\Dell\Downloads\Warunki_uczestnictwa.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wesele Mieszałków 07.02.2015.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wianki RM.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wtornik_170551559.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wtornik_181343641.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wtornik_182860614.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wtornik_182860911.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wtornik_282287746.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\WYCENA I KOMUNII ŚWIĘTEJ 2016 rok Głuchowo.docx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\wykresy (1).xlsx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\wykresy.xlsx:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\wymag_eduk_matematyka kl. 1a,b.doc:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Wzory ramek typu B:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\W_samym_sercu_morza_-_In_the_Heart_of_the_Sea_ 2015 _[DVDSCR]_[XviD-J25]_[Napisy_PL]_[AgusiQ][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Young_Thug_-_I m_Up_ 2016 _[mp3 320][Torrenty.org].torrent:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\YTD-Video-Downloader-27896-dp.appref-ms:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\zmiany_terminy_maj_lipiec_2015_aktualizacja (1).pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\zmiany_terminy_maj_lipiec_2015_aktualizacja.pdf:$CmdZnID AlternateDataStreams: C:\Users\Dell\Downloads\Żal, smutak....jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\09_vector.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\0Hh2p.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\13700056951246617426monogram.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\138-free-flourish-ornaments-illustrator.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\20-Decorative-Elements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\279-decorative-geometric-design-elements-vector-shapes.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\6-flourishes-set-2-d-o.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\64_1_wandtattoo_ornament_wellen.gif:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\661-Horizontal-Dividers.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\859_1_wandtattoo_ornament_dekorativeranke.gif:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Antique-Dividers.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Batman.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\calligraphic_dividers_by_andra04-d4rzraq.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Christmas-Trees.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Collection-Of-Retro-Elements(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Corner-Elements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Creative-Antique-Elements (1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Creative-Antique-Elements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Cute-Baby-Elements-Vector-Set.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\decorative-dividers-vector-127673.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\decorative-elements-vector-37497.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\decorative-lines-vector-968503.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\depositphotos_7502368-Decorative-elements-border-and-page-rules.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\depositphotos_8099958-Decorative-elements-border-and-page-rules.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Divider-Elements-Illustration(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\divider.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\divider_scroll.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\example2-o.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Flourish-Corners-Set(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\free-vector-european-gorgeous-pattern-element-vector_023611_Design_elements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\gitara.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\gma_vector_set05_decorative_elements_prv_all.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\gma_vector_set05_hooladanders_prv_all.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\gma_vector_set08_decorative_prv_all.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\gma_vector_set08_flourish_prv_all.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\greek-symbols-graphicxtras-flash.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Green-Leaf-Design-Elements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Leaf-Corners.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ornament-3-3.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ornament-4-4.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ornament-7-7.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Ornament1.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Ornament3.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ornamental-line-rules-vector.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Ornamental_Divider__Englische_Linie.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ORNAMENT_004_ZOOM.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\ozdobnik.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\random-vector-set-1.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\retro-text-dividers-set_23-2147493948.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Set-Of-Vintage-Dividers(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Silhouettes-Christmas-Trees-2.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Swirl-Corner-Designs(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Swirl-Decorative-Elements-Set.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Swirls.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\szlaczek.gif:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\text-fractals.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Underline_Flourish.png:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\vector-decorative-dividers-borders-16328937.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\vector-decorative-elements-set-design-32119263.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\vector-rule-line-divider.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\VectorCuteElements.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\Vectorize-Arrows(1).jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\vgosn_vector_ornaments_and_dividers.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\vintage-dividers-and-borders-vector.jpg:$CmdZnID AlternateDataStreams: C:\Users\Dell\Documents\y-letter-brushes-gallery.jpg:$CmdZnID ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-607335060-1145667579-176818443-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 91.230.116.26 - 91.230.116.27 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (whitelisted) =============== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{3FB026A7-6A48-451B-9920-8325809C3FC9}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE FirewallRules: [{92B6BE11-CB4E-4989-B98B-974C4F233A59}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE FirewallRules: [{53C2FE9E-E413-487E-BD7D-2B6A454E3D1F}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE FirewallRules: [{1A16B437-7A77-4C45-97D9-5377BA472CE6}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE FirewallRules: [{DBAFEADB-DA8F-408E-BD2F-BDA6615C1246}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\outlook.exe FirewallRules: [{E9328E64-3875-4B04-B349-AD318DCD08D9}] => (Allow) C:\Program Files\BitComet\BitComet.exe FirewallRules: [{476C73D7-72A5-42B8-9A33-2E1F43D59CAA}] => (Allow) C:\Program Files\BitComet\BitComet.exe FirewallRules: [{18F10783-548B-410D-8C16-CE8C7C2FED27}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{D6C53012-D2DD-4720-9277-F0E4B2D8BB33}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{2F9E7885-5C70-4022-A213-7F1CDD74EE1B}] => (Allow) C:\Program Files (x86)\Electronic Arts\Bitwa o Śródziemie II\game.dat FirewallRules: [{35C277F8-4F62-4FA2-B871-A18A2076BF05}] => (Allow) C:\Program Files (x86)\Electronic Arts\Bitwa o Śródziemie II\game.dat FirewallRules: [{61476C8D-4FFC-493D-8309-9FA4CBB337AC}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\FaxApplications.exe FirewallRules: [{7E2DDAED-220B-4F65-A457-DD949EB8CB66}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\DigitalWizards.exe FirewallRules: [{9DD9E922-A209-4360-93A2-AB780F9BEDEA}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\SendAFax.exe FirewallRules: [{F1F4A814-0B8D-4BF0-8275-46E9F2374343}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetup.exe FirewallRules: [{88F3C8E0-8965-4DD7-AB7B-6C8D6665EC24}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe FirewallRules: [{D0EA0137-4093-4CE0-8CB7-D1D4328F4294}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{8F773EBF-F53D-4271-91A7-B8DDAC97BA3E}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [{9D681862-F5D8-4B06-8142-924675DF9B12}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [TCP Query User{E4D6C86F-E70E-41CB-946E-4B98E9294B2F}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [UDP Query User{BFAD416B-6CA1-4AB8-AC92-FD5EB67277E6}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [{EFF12C88-AD4A-42E4-9DAE-9D95D099BAF7}] => (Allow) LPort=22725 FirewallRules: [{40B319FF-1BC5-4E86-9236-F5C801F5B1A2}] => (Allow) LPort=22725 FirewallRules: [{DE890C71-0F6F-43D7-895A-74D69277450E}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe FirewallRules: [{57482CC4-0FB2-4B3C-AA9D-B2D88A48E11A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: ManyCam Virtual Microphone Description: ManyCam Virtual Microphone Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Visicom Media Inc. Service: mcaudrv_simple Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: ManyCam Virtual Webcam Description: ManyCam Virtual Webcam Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Visicom Media Inc. Service: ManyCam Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. ==================== Event log errors: ========================= Application errors: ================== Error: (02/07/2016 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Wykonanie kopii zapasowej nie zostało zakończone z powodu błędu zapisu w lokalizacji kopii zapasowej I:\. Błąd: Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006). Error: (02/02/2016 06:56:08 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program IEXPLORE.EXE w wersji 11.0.9600.18163 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 3bc Godzina rozpoczęcia: 01d15de13403e924 Godzina zakończenia: 41 Ścieżka aplikacji: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Identyfikator raportu: Error: (01/31/2016 08:23:51 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Wykonanie kopii zapasowej nie zostało zakończone z powodu błędu zapisu w lokalizacji kopii zapasowej I:\. Błąd: Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006). Error: (01/30/2016 10:37:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: AutoKMS.exe, wersja: 2.2.2.0, sygnatura czasowa: 0x4e32f719 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x01476706 Identyfikator procesu powodującego błąd: 0x5b0 Godzina uruchomienia aplikacji powodującej błąd: 0xAutoKMS.exe0 Ścieżka aplikacji powodującej błąd: AutoKMS.exe1 Ścieżka modułu powodującego błąd: AutoKMS.exe2 Identyfikator raportu: AutoKMS.exe3 Error: (01/30/2016 10:37:48 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Aplikacja: AutoKMS.exe Wersja architektury: v4.0.30319 Opis: proces został przerwany z powodu nieobsłużonego wyjątku. Informacje o wyjątku: System.NullReferenceException Stos: w OfficeToolkit.Logic.KMSEditor.WritePIDToMemory(System.String, System.String) w AutoKMS.AutoKMS.RunAutoKMS() w AutoKMS.Program.Main() Error: (01/29/2016 05:02:31 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program IEXPLORE.EXE w wersji 11.0.9600.17728 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 1184 Godzina rozpoczęcia: 01d15aade57f490d Godzina zakończenia: 37 Ścieżka aplikacji: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Identyfikator raportu: Error: (01/29/2016 03:36:47 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Wystąpił nieokreślony błąd podczas przywracania systemu: (Zaplanowany punkt kontrolny). Informacje dodatkowe: 0x80070005. Error: (01/29/2016 02:56:27 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program IEXPLORE.EXE w wersji 11.0.9600.17728 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 974 Godzina rozpoczęcia: 01d15a9c9e64c5e1 Godzina zakończenia: 0 Ścieżka aplikacji: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Identyfikator raportu: Error: (01/29/2016 01:56:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: IEXPLORE.EXE, wersja: 11.0.9600.17728, sygnatura czasowa: 0x55024724 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18798, sygnatura czasowa: 0x5507b3e0 Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x000cea0b Identyfikator procesu powodującego błąd: 0x508 Godzina uruchomienia aplikacji powodującej błąd: 0xIEXPLORE.EXE0 Ścieżka aplikacji powodującej błąd: IEXPLORE.EXE1 Ścieżka modułu powodującego błąd: IEXPLORE.EXE2 Identyfikator raportu: IEXPLORE.EXE3 Error: (01/25/2016 03:38:48 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Wykonanie kopii zapasowej nie zostało zakończone z powodu błędu zapisu w lokalizacji kopii zapasowej I:\. Błąd: Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006). System errors: ============= Error: (02/10/2016 01:16:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Util Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 01:16:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Update Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 01:16:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi ManyCam Service z powodu następującego błędu: %%2 Error: (02/10/2016 01:12:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Util Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 01:12:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Update Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 01:12:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi ManyCam Service z powodu następującego błędu: %%2 Error: (02/10/2016 01:12:15 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 13:10:26 na ‎2016-‎02-‎10 było nieoczekiwane. Error: (02/10/2016 00:31:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Util Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 00:31:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Update Clock Hand z powodu następującego błędu: %%2 Error: (02/10/2016 00:31:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi ManyCam Service z powodu następującego błędu: %%2 Microsoft Office Sessions: ========================= Error: (02/07/2016 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: I:\Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006) Error: (02/02/2016 06:56:08 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.181633bc01d15de13403e92441C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (01/31/2016 08:23:51 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: I:\Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006) Error: (01/30/2016 10:37:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: AutoKMS.exe2.2.2.04e32f719unknown0.0.0.000000000c0000005014767065b001d15b41b950aac1C:\Windows\AutoKMS\AutoKMS.exeunknown20b8556f-c735-11e5-ae94-002564ca1081 Error: (01/30/2016 10:37:48 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Aplikacja: AutoKMS.exe Wersja architektury: v4.0.30319 Opis: proces został przerwany z powodu nieobsłużonego wyjątku. Informacje o wyjątku: System.NullReferenceException Stos: w OfficeToolkit.Logic.KMSEditor.WritePIDToMemory(System.String, System.String) w AutoKMS.AutoKMS.RunAutoKMS() w AutoKMS.Program.Main() Error: (01/29/2016 05:02:31 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.17728118401d15aade57f490d37C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (01/29/2016 03:36:47 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Zaplanowany punkt kontrolny0x80070005 Error: (01/29/2016 02:56:27 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.1772897401d15a9c9e64c5e10C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (01/29/2016 01:56:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IEXPLORE.EXE11.0.9600.1772855024724ntdll.dll6.1.7601.187985507b3e0c0000374000cea0b50801d15a945f2f5dacC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\ntdll.dllc861cfe5-c687-11e5-89b8-002564ca1081 Error: (01/25/2016 03:38:48 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: I:\Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006) ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz Percentage of memory in use: 64% Total physical RAM: 3995.61 MB Available physical RAM: 1425.46 MB Total Pagefile: 7989.43 MB Available Pagefile: 5177.59 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:233.72 GB) (Free:61.09 GB) NTFS ==================== MBR & Partition Table ==================