Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 12-02-2017 Uruchomiony przez Marcin (13-02-2017 17:48:02) Uruchomiony z C:\Users\Marcin\Downloads Windows 10 Home (X64) (2015-10-02 00:06:26) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-914296858-1329583620-193235316-500 - Administrator - Disabled) Asiuczek (S-1-5-21-914296858-1329583620-193235316-1003 - Limited - Enabled) => C:\Users\Asiuczek Gość (S-1-5-21-914296858-1329583620-193235316-501 - Limited - Disabled) Konto domyślne (S-1-5-21-914296858-1329583620-193235316-503 - Limited - Disabled) Marcin (S-1-5-21-914296858-1329583620-193235316-1000 - Administrator - Enabled) => C:\Users\Marcin Marcin_2 (S-1-5-21-914296858-1329583620-193235316-1002 - Limited - Enabled) => C:\Users\Marcin_2 ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Enabled) {E8F7F446-E1BD-DFE6-38D1-54E0ADE01D89} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated) Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.16 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated) Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated) Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated) Aktualizacje NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Alan Wake (HKLM-x32\...\Alan Wake_is1) (Version: - ) ALLPlayer V6.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) AMD Catalyst Install Manager (HKLM\...\{AAFD93A0-6522-9FF4-69CF-15B98681681A}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Any Video Converter 5.7.6 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG) ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.) ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version: - ASRock Inc.) ASRock XFast RAM v2.0.28 (HKLM\...\ASRock XFast RAM_is1) (Version: - ASRock Inc.) Assassins Creed Unity Gold Edition version 1.1.0 (HKLM-x32\...\Assassins Creed Unity Gold Edition_is1) (Version: 1.1.0 - dzrepack) ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.2.6.0 - ASUSTek COMPUTER INC.) ASUS GPU Tweak (x32 Version: 2.2.6.0 - ASUSTek COMPUTER INC.) Hidden Asystent uaktualnienia do systemu Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation) A-Tuning v1.0.26 (HKLM-x32\...\A-Tuning_is1) (Version: 1.0.26 - ) Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.12.0 - Autodesk) Bamboo Dock (HKLM-x32\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.) Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden Bastion (HKLM-x32\...\Bastion_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) Batman Episode 5 (HKLM-x32\...\Batman Episode 5_is1) (Version: - ) bl (x32 Version: 1.0.0 - Your Company Name) Hidden Cabals: Card Blitz (HKLM\...\Steam App 562540) (Version: - Kyy Games) CBR Reader (HKLM-x32\...\{EDAAC216-AC73-4152-9654-E12FE5A69F5D}_is1) (Version: - cbrreader.com) CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform) Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production) Clifford na wyspie (HKLM-x32\...\Clifford na wyspie) (Version: - ) COMODO Firewall (HKLM\...\{38F898C8-272F-455F-9BD6-71FEBA3E4AF5}) (Version: 8.2.0.4703 - COMODO Security Solutions Inc.) Croc (HKLM-x32\...\Croc) (Version: - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd) Darkest Dungeon (HKLM-x32\...\Darkest Dungeon_is1) (Version: - ) Deadly Premonition (HKLM-x32\...\Deadly Premonition_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform) Deus Ex Human Revolution - Complete Edition (HKLM-x32\...\Deus Ex Human Revolution - Complete Edition_is1) (Version: - ) Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.00 - Electronic Arts, Inc.) Dropbox (HKLM-x32\...\Dropbox) (Version: 19.4.13 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden DuelystLauncher (HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\launcher) (Version: 0.010 - Counterplay Games Inc.) e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 8.0.6 - Ministerstwo Finansow) e-Deklaracje Desktop (x32 Version: 8.0.6 - Ministerstwo Finansow) Hidden Evernote v. 5.8.13 (HKLM-x32\...\{A229420E-204B-11E5-B844-0050569584E9}) (Version: 5.8.13.8152 - Evernote Corp.) Fallout 2 Unofficial Patch 1.02.31 (HKLM-x32\...\Fallout 2 Unofficial Patch_is1) (Version: - killap) Fallout2 (HKLM-x32\...\Fallout2) (Version: - ) Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.01 - Ubisoft) FileZilla Client 3.9.0.2 (HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\FileZilla Client) (Version: 3.9.0.2 - Tim Kosse) Free Media Converter 2.97 (HKLM-x32\...\Free Media Converter_is1) (Version: - FreeMediaConverter.org) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden Gothic II - Noc Kruka (HKLM-x32\...\{6FB6D550-DDC4-4996-9CDF-91C34F0A4C4A}) (Version: 2.60.000 - ) GOTHIC2 - Noc Kruka - 'Pakiet systemowy' (HKLM-x32\...\GOTHIC2 - Noc Kruka - 'Pakiet systemowy') (Version: 1.6 - World of Gothic RU © 2016) Hard West (HKLM-x32\...\Hard West_is1) (Version: - ) Heroes of Might and Magic III - Złota Edycja (HKLM-x32\...\{8B743AA0-53B2-11D2-808A-00600895FB43}) (Version: 1.0 - ) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation) Intel(R) Network Connections 18.2.63.0 (HKLM\...\PROSetDX) (Version: 18.2.63.0 - Intel) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation) Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.0.30.6644 - Intel(R) Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Invisible Inc (HKLM-x32\...\Invisible Inc_is1) (Version: - ) Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation) Java SE Development Kit 7 Update 67 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170670}) (Version: 1.7.0.670 - Oracle) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.10.1.0 - LG Electronics) LibreOffice 5.0.0.5 (HKLM-x32\...\{48806D1D-C8D3-4235-8893-D5A03BAFC307}) (Version: 5.0.0.5 - The Document Foundation) Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts) Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts) Metro 2033 Redux (HKLM-x32\...\Metro 2033 Redux_is1) (Version: - ) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850415-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mischief-Free (HKLM-x32\...\Mischief-Free) (Version: - ) Movavi Video Converter 15 (HKLM-x32\...\Movavi Video Converter 15) (Version: 15.2.2 - Movavi) Mozilla Firefox 41.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 pl)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) Mozilla Thunderbird 38.7.2 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 38.7.2 (x86 pl)) (Version: 38.7.2 - Mozilla) MPC-HC 1.7.3 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.3 - MPC-HC Team) Najdłuższa Podróż (HKLM-x32\...\Najdłuższa Podróż) (Version: - ) Node.js (HKLM-x32\...\{4D32E491-0913-4970-855E-E7EB6481A07D}) (Version: 0.10.30 - Joyent, Inc. and other Node contributors) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.8 - Notepad++ Team) NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.69 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation) NVIDIA Sterownik graficzny 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation) NVIDIA Wirtualny dźwięk Miracast 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 352.86 - NVIDIA Corporation) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{B5373BA3-BAD7-4EAC-A9D2-B66B41B82C57}) (Version: 4.11.9775 - Apache Software Foundation) Opera Stable 43.0.2442.806 (HKLM-x32\...\Opera 43.0.2442.806) (Version: 43.0.2442.806 - Opera Software) Origin (HKLM-x32\...\Origin) (Version: 9.12.2.60376 - Electronic Arts, Inc.) Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden Pakiet zgodności dla systemu Office 2007 (HKLM-x32\...\{90120000-0020-0415-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) PakkISO 0.4 (HKLM-x32\...\PakkISO_is1) (Version: PakkISO 0.4 by zorted, installer by BitLooter - ) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) Panel sterowania NVIDIA 368.69 (Version: 368.69 - NVIDIA Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge) pdfforge Images2PDF 0.9.7.1125 (HKLM\...\{00120495-F25C-4F44-9DC7-2D812D025DBA}) (Version: 0.9.7.1125 - pdfforge) ph (x32 Version: 1.0.0 - Your Company Name) Hidden Pillars of Eternity (HKLM-x32\...\1207666813_is1) (Version: 2.0.0.1 - GOG.com) Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Quivi 1.2.1 (HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\Quivi) (Version: 1.2.1 - ) Rayman Legends (HKLM-x32\...\UmF5bWFuTGVnZW5kcw==_is1) (Version: 1 - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform) ScummVM (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team) Seasons after Fall (HKLM\...\c2Vhc29uc2FmdGVyZmFsbA_is1) (Version: 1 - ) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Splashtop Streamer (HKLM-x32\...\{B7C5EA94-B96A-41F5-BE95-25D78B486678}) (Version: 2.4.5.2 - Splashtop Inc.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve) Sunless Sea (HKLM-x32\...\1421064427_is1) (Version: 2.4.0.5 - GOG.com) System Shock2 Demo (HKLM-x32\...\SShockDeinstallKey) (Version: - ) Tablet Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.6-3 - Wacom Technology Corp.) Tales from the Borderlands version Tales from the Borderlands (HKLM-x32\...\Tales from the Borderlands_is1) (Version: Tales from the Borderlands - ) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.24.0.0 - GOG.com) Thief 2 - The Metal Age (HKLM-x32\...\1207659001_is1) (Version: 2.2.0.25 - GOG.com) Thief 2 (HKLM-x32\...\Thief2DeinstallKey) (Version: - ) To The Moon (HKLM-x32\...\To The Moon_is1) (Version: - ) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 - Ghisler Software GmbH) Transistor (HKLM-x32\...\Transistor_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) Trine Enhanced Edition (HKLM-x32\...\1207659020_is1) (Version: 2.0.0.2 - GOG.com) Unity Web Player (HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS) Unravel™ (HKLM-x32\...\{5105E605-9EE7-4050-9CC0-005093BBF89A}) (Version: 1.0.0.0 - Electronic Arts, Inc.) UpdateAssistant (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft) USB Network Joystick (HKLM-x32\...\{2A558A06-A44E-400D-95AD-D9FAA89AFD36}) (Version: V3.70a - ) VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.) Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation) Wtyczka e-Deklaracje (HKLM-x32\...\{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1) (Version: 4.2.0 - Ministerstwo Finansów) Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-914296858-1329583620-193235316-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-C030B1DB4FAB}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Brak pliku ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {01A045AE-546E-40C8-AAA2-6EDA420C35A9} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: {07D796CE-035F-4E01-BABB-67D1CEE306EC} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation) Task: {1172630E-5359-459D-A466-E132A0D1DE61} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {11AEB51C-21C6-450E-B756-5EC4AB84045A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {1264550D-711D-4194-9EFC-89B42DBA3930} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1002Core => C:\Users\Marcin_2\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {14C9064F-F6DA-411E-8DF7-591D9C454907} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [2016-09-12] (Microsoft Corporation) Task: {179E8477-ADC1-4273-BCFA-5410D6095E72} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {193DFAFA-3B75-498F-88BF-BF347EC02372} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-10-02] (COMODO) Task: {1FDDE395-C100-470E-B413-0E7FA4F9499E} - System32\Tasks\{DD59A0F1-39CD-4F31-A82E-7685C1E3A3FD} => H:\Gry\Alan Wake\AlanWake.exe [2012-02-15] () Task: {2008A097-8A85-42BB-8FE1-55B91896E355} - System32\Tasks\{24D2BBFE-74D8-40EA-A9C6-9A884853984F} => pcalua.exe -a L:\Installer.exe -d L:\ Task: {2334E903-47C7-4B81-B991-57A9EF947AE9} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-28] (Dropbox, Inc.) Task: {2D9E67FC-950C-4007-ADC4-A6F3F7F35A3B} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe Task: {357514F6-C523-43D4-9E28-0D3D78E7B720} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-28] (Dropbox, Inc.) Task: {3DF29764-284F-4803-A0BC-B2B44FEEBB85} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {516817BC-229C-486B-A265-845B9B36FFD7} - System32\Tasks\MarcinCrumpedMicrocephalicV2 => Rundll32.exe DrugmakerPropane.dll,main 7 1 <==== UWAGA Task: {523A6888-0733-4C91-9918-6CBC10EC2076} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {5991868C-0D94-4642-832E-458FFE875AB7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {5A67874B-D75C-4800-9000-7736885D20B2} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-10-02] (COMODO) Task: {626EAD91-E88A-42F5-AC37-38B38317FBEB} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {674ACF21-FC3B-4DBF-AAD6-8429B8CBA01C} - System32\Tasks\{5BB0EC3C-ED0A-4080-B802-67B77DC80FC3} => pcalua.exe -a J:\Setup\Data\XMen2.exe Task: {69494DF8-0675-4A12-9BC9-1FAA61D1CF5A} - System32\Tasks\Opera scheduled Autoupdate 1417019715 => C:\Program Files (x86)\Opera\launcher.exe [2017-02-08] (Opera Software) Task: {6976C2E4-12CC-44AE-B564-E440A871D6E4} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1002UA => C:\Users\Marcin_2\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.) Task: {6AA35E70-0B16-4C04-859C-72BED82142F4} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe [2017-01-11] (Adobe Systems Incorporated) Task: {7F1F927B-AEC1-4C01-806D-737352E2E6D4} - System32\Tasks\AdobeAAMUpdater-1.0-TWIERDZA-Marcin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-10-11] (Adobe Systems Incorporated) Task: {8385F78D-15AC-4942-A3FD-9DE0EF2F5EAD} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1000UA => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-28] (Dropbox, Inc.) Task: {8E93181C-F695-4FDE-AAC6-7BFB8CE23CDF} - System32\Tasks\Opera scheduled Autoupdate 1409174463 => C:\Users\Marcin_2\AppData\Local\Programs\Opera\launcher.exe [2017-01-14] (Opera Software) Task: {8F3796C8-E0AF-4C62-B059-61A220AD7EC9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {915E174E-C9FB-409E-9015-F46C6526707C} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-10-02] (COMODO) Task: {94E05872-0E10-462A-A794-00BB07869076} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-10-02] (COMODO) Task: {9ED03CCA-9F33-4F3A-9C57-2B40728DDEA6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {A633C1DA-80CF-46C7-85D5-96B7980AFD77} - System32\Tasks\{CD63D230-E103-44B8-9A4B-902FDEF6FF62} => pcalua.exe -a C:\Sierra\Arcanum\Arcanum.exe -d C:\Sierra\Arcanum -c -fullscreen Task: {A766922B-6C20-489C-BA8B-4C4CBB0BBCA3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1000Core => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-28] (Dropbox, Inc.) Task: {AB2B4373-4103-4FC6-8357-62AD292AF587} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-16] (Piriform Ltd) Task: {AB434BF6-12FF-477C-8B78-483BCE05621A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {AF1B1D9E-2315-4FE0-9AB1-703123B5A565} - System32\Tasks\{66327B86-283D-4286-87E7-E7B9B38B46AB} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\AdDLMgr.exe" Task: {C6E9F119-E47A-4EBD-8EFC-FAB8FC26B0E2} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {C8A9E1B9-9CB2-4CA9-8F79-87490089A883} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe Task: {DCA280CD-3A6F-4414-8B8F-1F5AC1DBA9C8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {DEA162E2-444B-4037-9CBA-57420E4B594F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {E195AE70-A10C-470B-9990-5104C4801D73} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated) Task: {E341EB6B-AB1F-4F2B-BE34-F292CC0EA9BC} - System32\Tasks\asrRd => C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe [2012-10-25] (ASRock) Task: {EBA15644-45A0-4BB2-BB3F-A1E91D066209} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-01-13] (Adobe Systems Incorporated) Task: {FB2B4ED9-D3EA-49A1-B020-73C9C1CB53BD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-07-10] (Apple Inc.) Task: {FE170F39-0CF9-443C-9BB9-E0A81C799259} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Brak pliku <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1000Core.job => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1000UA.job => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1002Core.job => C:\Users\Marcin_2\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-914296858-1329583620-193235316-1002UA.job => C:\Users\Marcin_2\AppData\Local\Dropbox\Update\DropboxUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2015-07-10 12:00 - 2015-07-10 12:00 - 00028160 _____ () C:\WINDOWS\SYSTEM32\efsext.dll 2015-10-02 01:05 - 2015-10-02 01:05 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 2016-11-22 12:35 - 2016-11-22 12:35 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll 2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe 2015-06-13 14:53 - 2015-09-28 20:32 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe 2016-07-11 22:57 - 2016-06-29 18:50 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-11-22 12:35 - 2016-11-22 12:35 - 02495776 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-11-22 12:35 - 2016-11-22 12:35 - 02495776 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-05-27 11:00 - 2016-05-27 11:00 - 00959168 _____ () C:\Users\Marcin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll 2015-09-30 23:12 - 2015-09-30 23:12 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-11-22 12:36 - 2016-11-22 12:36 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-11-22 12:35 - 2016-11-22 12:35 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-11-22 12:35 - 2016-11-22 12:35 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-09-30 23:13 - 2015-09-30 23:13 - 02274816 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-07-10 12:00 - 2015-07-10 17:34 - 00210432 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll 2016-03-29 17:31 - 2016-03-29 17:31 - 00796784 _____ () C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe 2012-09-10 11:37 - 2012-09-10 11:37 - 00192512 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll 2012-09-06 16:19 - 2012-09-06 16:19 - 00049152 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll 2016-07-11 22:57 - 2016-06-29 23:39 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2017-02-08 23:06 - 2017-02-06 08:41 - 39820376 _____ () C:\Program Files (x86)\Opera\43.0.2442.806\opera_browser.dll 2017-02-08 23:06 - 2017-02-06 08:41 - 45837912 _____ () C:\Program Files (x86)\Opera\43.0.2442.806\opera_child.dll 2017-02-08 23:06 - 2017-02-08 23:05 - 01930328 _____ () C:\Program Files (x86)\Opera\43.0.2442.806\libglesv2.dll 2017-02-08 23:06 - 2017-02-08 23:05 - 00087640 _____ () C:\Program Files (x86)\Opera\43.0.2442.806\libegl.dll 2012-03-09 15:26 - 2016-10-11 21:18 - 00100352 _____ () C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\zlib1.dll 2014-07-31 16:22 - 2014-07-31 16:22 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll 2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll 2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\WINDOWS\CDP_Uninst.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\explorer.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\HelpPane.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\IsUninst.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\aadcloudap.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\aadtb.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\accountaccessor.dll:$CmdTcID [101120] AlternateDataStreams: C:\WINDOWS\system32\aclui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AcpiServiceVnA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\ActiveSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\adhsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AdobePDF.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AdobePDFUI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\adsmsext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\advapi32.dll:$CmdTcID [1335714] AlternateDataStreams: C:\WINDOWS\system32\aeinv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\aepic.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\aitstatic.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\APHostService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\apisetschema.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\apphelp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ApplicationFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppointmentApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\appraiser.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppReadiness.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\apprepapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\apprepsync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\appwiz.cpl:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\AppxAllUserStore.dll:$CmdTcID [417474] AlternateDataStreams: C:\WINDOWS\system32\AppXApplicabilityBlob.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppxApplicabilityEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentExtensions.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentServer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppxPackaging.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AppxSip.dll:$CmdTcID [316418] AlternateDataStreams: C:\WINDOWS\system32\AppxSysprep.dll:$CmdTcID [40960] AlternateDataStreams: C:\WINDOWS\system32\asycfilt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\atmfd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\atmlib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\audiodg.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AudioEndpointBuilder.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AudioEng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AUDIOKSE.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\audioLibVc.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\AudioSes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\audiosrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AuthBroker.dll:$CmdTcID [67584] AlternateDataStreams: C:\WINDOWS\system32\authfwcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AuthHost.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\authui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AzureSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\basesrv.dll:$CmdTcID [32512] AlternateDataStreams: C:\WINDOWS\system32\bcdedit.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\BCP47Langs.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\bcryptprimitives.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\BFE.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\BingMaps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\bisrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\blackbox.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\browcli.dll:$CmdTcID [29184] AlternateDataStreams: C:\WINDOWS\system32\browser.dll:$CmdTcID [66560] AlternateDataStreams: C:\WINDOWS\system32\browserbroker.dll:$CmdTcID [157698] AlternateDataStreams: C:\WINDOWS\system32\browser_broker.exe:$CmdTcID [13232] AlternateDataStreams: C:\WINDOWS\system32\cabinet.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CallHistoryClient.dll:$CmdTcID [81920] AlternateDataStreams: C:\WINDOWS\system32\catsrvut.dll:$CmdTcID [1047554] AlternateDataStreams: C:\WINDOWS\system32\CellularAPI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cemapi.dll:$CmdTcID [489474] AlternateDataStreams: C:\WINDOWS\system32\certca.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\certcli.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CertEnroll.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\certmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\certprop.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Chakra.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Chakradiag.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ChatApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CheckNetIsolation.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cic.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Clipc.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\ClipSVC.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ClipUp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cloudAP.dll:$CmdTcID [93440] AlternateDataStreams: C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll:$CmdTcID [208898] AlternateDataStreams: C:\WINDOWS\system32\clusapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cmdl32.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cmintegrator.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cmipnpinstall.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\COLORCNV.DLL:$CmdTcID [102536] AlternateDataStreams: C:\WINDOWS\system32\combase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\comdlg32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CompatTelRunner.exe:$CmdTcID [50562] AlternateDataStreams: C:\WINDOWS\system32\comsvcs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\comuid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\configmanager2.dll:$CmdTcID [634882] AlternateDataStreams: C:\WINDOWS\system32\configurationclient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ContactApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CoreMessaging.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CoreUIComponents.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CPFilters.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CredProvDataModel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\credprovhost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\credprovs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\credssp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\crypt32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CryptoWinRT.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cryptsvc.dll:$CmdTcID [156674] AlternateDataStreams: C:\WINDOWS\system32\cryptui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\csrsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CX64APO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d2d1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\d3d10level9.dll:$CmdTcID [1219954] AlternateDataStreams: C:\WINDOWS\system32\d3d10warp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\d3d11.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\d3d9.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_47.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DafPrintProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DAMediaManager.dll:$CmdTcID [63232] AlternateDataStreams: C:\WINDOWS\system32\DAMM.dll:$CmdTcID [242690] AlternateDataStreams: C:\WINDOWS\system32\DaOtpCredentialProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\das.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DataSenseHandlers.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DavSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dbgcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dbgeng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DbgModel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DbxSvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dccw.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dcomp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPA64F3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPD64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPD64AF3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPO64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPO64AF3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPP64AF3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\devenum.dll:$CmdTcID [181826] AlternateDataStreams: C:\WINDOWS\system32\deviceaccess.dll:$CmdTcID [127744] AlternateDataStreams: C:\WINDOWS\system32\deviceassociation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DeviceEnroller.exe:$CmdTcID [167938] AlternateDataStreams: C:\WINDOWS\system32\DevicePairing.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\devinv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\devmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\diagperf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\diagtrack.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\diagtrack_win.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\diagtrack_wininternal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\directmanipulation.dll:$CmdTcID [277884] AlternateDataStreams: C:\WINDOWS\system32\Display.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dlnashext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dmcertinst.exe:$CmdTcID [309250] AlternateDataStreams: C:\WINDOWS\system32\dmcsps.dll:$CmdTcID [60928] AlternateDataStreams: C:\WINDOWS\system32\dmdskmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dmenrollengine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DMRServer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOProp.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOv201.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOv211.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\domgmt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dosvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dot3gpui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dot3mm.dll:$CmdTcID [85504] AlternateDataStreams: C:\WINDOWS\system32\dot3ui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\drvstore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dssvc.dll:$CmdTcID [72704] AlternateDataStreams: C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSBoostDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPONS64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSLFXAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSLimiterDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSNeoPCDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSSymmetryDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PGFX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PLFX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PREC64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\dui70.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\duser.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dwmcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dwmredir.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DWrite.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dxgi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dxtrans.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eapp3hst.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eappcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eappgnui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eapphost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eappprxy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\eapsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\easwrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\edgehtml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeHelper.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeManagerObj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EDPCleanup.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\efswrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\els.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EmailApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EncDec.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\enrollmentapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\enterprisecsps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll:$CmdTcID [136194] AlternateDataStreams: C:\WINDOWS\system32\esent.dll:$CmdTcID [5975042] AlternateDataStreams: C:\WINDOWS\system32\EthernetMediaManager.dll:$CmdTcID [73472] AlternateDataStreams: C:\WINDOWS\system32\evr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ExecModelClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\expand.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ExplorerFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ExSMime.dll:$CmdTcID [137472] AlternateDataStreams: C:\WINDOWS\system32\extrac32.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ExtrasXmlParser.dll:$CmdTcID [11776] AlternateDataStreams: C:\WINDOWS\system32\f3ahvoas.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\facecredentialprovider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fhcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fhengine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fhsettingsprovider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\filemgmt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FingerprintEnrollment.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FirewallAPI.dll:$CmdTcID [1022978] AlternateDataStreams: C:\WINDOWS\system32\FMAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\FntCache.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fontdrvhost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FontProvider.dll:$CmdTcID [57344] AlternateDataStreams: C:\WINDOWS\system32\fphc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fveapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fwbase.dll:$CmdTcID [91648] AlternateDataStreams: C:\WINDOWS\system32\fwcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fwpolicyiomgr.dll:$CmdTcID [392194] AlternateDataStreams: C:\WINDOWS\system32\FWPUCLNT.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FwRemoteSvr.dll:$CmdTcID [173058] AlternateDataStreams: C:\WINDOWS\system32\GamePanel.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\gameux.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\gdi32.dll:$CmdTcID [3182610] AlternateDataStreams: C:\WINDOWS\system32\GdiPlus.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\generaltel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Geolocation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\GlobCollationHost.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\gpapi.dll:$CmdTcID [65604] AlternateDataStreams: C:\WINDOWS\system32\gpedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\gpsvc.dll:$CmdTcID [668416] AlternateDataStreams: C:\WINDOWS\system32\hevcdecoder.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hgcpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HiFiDAX2API.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\hlink.dll:$CmdTcID [218114] AlternateDataStreams: C:\WINDOWS\system32\hnetcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\httpprxm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\httpprxp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HttpsDataSource.dll:$CmdTcID [159746] AlternateDataStreams: C:\WINDOWS\system32\iassvcs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ICEsoundAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\icsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IdCtrls.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ie4uinit.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ieapfltr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iepeers.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ieproxy.dll:$CmdTcID [336384] AlternateDataStreams: C:\WINDOWS\system32\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ieui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IKEEXT.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ImplatSetup.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\inetcomm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\input.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\InputService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\InstallAgent.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IntelSSTAPO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\IntelSstCApoPropPage.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\internetmail.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\invagent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll:$CmdTcID [28928] AlternateDataStreams: C:\WINDOWS\system32\iphlpsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ipsecsnp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IPSECSVC.DLL:$CmdTcID [196096] AlternateDataStreams: C:\WINDOWS\system32\ipsmsnap.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\JpMapControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\jscript.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\jscript9.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\jscript9diag.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\KAAPORT64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\KBDAZE.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\system32\KBDAZEL.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\system32\KBDAZST.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\system32\kbdgeoqw.dll:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\system32\kerberos.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\kernel32.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\KernelBase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll:$CmdTcID [212994] AlternateDataStreams: C:\WINDOWS\system32\KnobsCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\KnobsCsp.dll:$CmdTcID [59136] AlternateDataStreams: C:\WINDOWS\system32\ksproxy.ax:$CmdTcID [611330] AlternateDataStreams: C:\WINDOWS\system32\LegacyNetUX.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LegacyNetUXHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LicenseManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LicenseManagerShellext.exe:$CmdTcID [13312] AlternateDataStreams: C:\WINDOWS\system32\licensingdiag.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\localspl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LocationApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LocationCrowdsource.dll:$CmdTcID [431106] AlternateDataStreams: C:\WINDOWS\system32\LocationFramework.dll:$CmdTcID [134400] AlternateDataStreams: C:\WINDOWS\system32\LocationGeofences.dll:$CmdTcID [171008] AlternateDataStreams: C:\WINDOWS\system32\LocationPeCell.dll:$CmdTcID [102144] AlternateDataStreams: C:\WINDOWS\system32\LocationPeIP.dll:$CmdTcID [88320] AlternateDataStreams: C:\WINDOWS\system32\LocationPeWiFi.dll:$CmdTcID [110592] AlternateDataStreams: C:\WINDOWS\system32\LocationWebproxy.dll:$CmdTcID [878594] AlternateDataStreams: C:\WINDOWS\system32\LocationWiFiAdapter.dll:$CmdTcID [191490] AlternateDataStreams: C:\WINDOWS\system32\LockAppBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LockAppHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\LogonController.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\lsasrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\lsass.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Magnification.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Magnify.exe:$CmdTcID [422912] AlternateDataStreams: C:\WINDOWS\system32\makecab.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MapConfiguration.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MapControlCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MapsStore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO4064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO5064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO6064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO7064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPOShell64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioRealtek64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxSpeechAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO2064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO3064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO4064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MbaeApi.dll:$CmdTcID [1141762] AlternateDataStreams: C:\WINDOWS\system32\MbaeApiPublic.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MBMediaManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mbsmsapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MCRecvSrc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mcupdate_GenuineIntel.dll:$CmdTcID [1082050] AlternateDataStreams: C:\WINDOWS\system32\MDEServer.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MDMAppInstaller.exe:$CmdTcID [168962] AlternateDataStreams: C:\WINDOWS\system32\mdmmigrator.dll:$CmdTcID [337922] AlternateDataStreams: C:\WINDOWS\system32\mdmregistration.dll:$CmdTcID [84992] AlternateDataStreams: C:\WINDOWS\system32\MessagingDataModel2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfasfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MFCaptureEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfds.dll:$CmdTcID [1563970] AlternateDataStreams: C:\WINDOWS\system32\mfh264enc.dll:$CmdTcID [269568] AlternateDataStreams: C:\WINDOWS\system32\MFMediaEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfmp4srcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfnetcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfnetsrc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfplat.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfsvr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mftranscode.dll:$CmdTcID [467986] AlternateDataStreams: C:\WINDOWS\system32\mfvdsp.dll:$CmdTcID [167410] AlternateDataStreams: C:\WINDOWS\system32\MFWMAAEC.DLL:$CmdTcID [927746] AlternateDataStreams: C:\WINDOWS\system32\microsoft-windows-system-events.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MiracastReceiver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mispace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MISS_APO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mmc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mmcbase.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mmcndmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mmcshext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mmsys.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\modernexecserver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mos.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\moshost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MosHostClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\moshostcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MP3DMOD.DLL:$CmdTcID [239602] AlternateDataStreams: C:\WINDOWS\system32\MP43DECD.DLL:$CmdTcID [503090] AlternateDataStreams: C:\WINDOWS\system32\MP4SDECD.DLL:$CmdTcID [188796] AlternateDataStreams: C:\WINDOWS\system32\MPG4DECD.DLL:$CmdTcID [501042] AlternateDataStreams: C:\WINDOWS\system32\mprddm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mprdim.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MPSSVC.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mqqm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mqrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mqsnap.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MrmCoreR.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MrmIndexer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MSAJApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mscms.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msctf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msctfuimanager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msdt.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\msdtc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msdtckrm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msdtctm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msftedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mshtml.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mshtmled.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msmpeg2adec.dll:$CmdTcID [2127010] AlternateDataStreams: C:\WINDOWS\system32\MSMPEG2ENC.DLL:$CmdTcID [465664] AlternateDataStreams: C:\WINDOWS\system32\msmpeg2vdec.dll:$CmdTcID [1412124] AlternateDataStreams: C:\WINDOWS\system32\msnetobj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mspaint.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msscntrs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msscp.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MsSpellCheckingFacility.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mssph.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mssphtb.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mssprxy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mssrch.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mssvp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mstscax.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msv1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msvcp_win.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MSVidCtl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mswsock.dll:$CmdTcID [727746] AlternateDataStreams: C:\WINDOWS\system32\msxml3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mtxoci.dll:$CmdTcID [294914] AlternateDataStreams: C:\WINDOWS\system32\MusNotification.exe:$CmdTcID [75776] AlternateDataStreams: C:\WINDOWS\system32\MusNotificationUx.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MusUpdateHandlers.dll:$CmdTcID [669698] AlternateDataStreams: C:\WINDOWS\system32\mycomput.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NAHIMICAPOlfx.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NahimicAPONSControl.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NAHIMICV2apo.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NAPCRYPT.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NaturalLanguage6.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ncryptprov.dll:$CmdTcID [694274] AlternateDataStreams: C:\WINDOWS\system32\ncryptsslp.dll:$CmdTcID [56572] AlternateDataStreams: C:\WINDOWS\system32\ncsi.dll:$CmdTcID [179968] AlternateDataStreams: C:\WINDOWS\system32\ndfapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\netapi32.dll:$CmdTcID [40064] AlternateDataStreams: C:\WINDOWS\system32\netcenter.dll:$CmdTcID [608256] AlternateDataStreams: C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe:$CmdTcID [150530] AlternateDataStreams: C:\WINDOWS\system32\netcfgx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\netman.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetSetupApi.dll:$CmdTcID [207554] AlternateDataStreams: C:\WINDOWS\system32\NetSetupEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetSetupSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\netshell.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nettrace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetworkCollectionAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetworkDesktopSettings.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetworkMobileSettings.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NetworkUXBroker.exe:$CmdTcID [84144] AlternateDataStreams: C:\WINDOWS\system32\ngccredprov.dll:$CmdTcID [692226] AlternateDataStreams: C:\WINDOWS\system32\NgcCtnrGidsHandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ngckeyenum.dll:$CmdTcID [176130] AlternateDataStreams: C:\WINDOWS\system32\ngcsvc.dll:$CmdTcID [1027074] AlternateDataStreams: C:\WINDOWS\system32\ninput.dll:$CmdTcID [710658] AlternateDataStreams: C:\WINDOWS\system32\nlasvc.dll:$CmdTcID [743426] AlternateDataStreams: C:\WINDOWS\system32\nlmgp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NotificationController.dll:$CmdTcID [1035266] AlternateDataStreams: C:\WINDOWS\system32\NotificationObjFactory.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nshwfp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ntoskrnl.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ntshrui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvapi64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvaudcap64v.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcuda.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcuvid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvd3dumx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvDecMFTMjpeg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvdispco6436869.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco6436869.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvEncMFTH264.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvEncodeAPI64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvfatbinaryLoader.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvFBC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvhdagenco6420103.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvhdap64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvIFR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvIFROpenGL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvinitx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvmcumd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvoglshim64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvoglv64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvopencl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvptxJitCompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvumdshimx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvvsvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvwgf2umx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\odbcconf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\oemlicense.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\offreg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ole32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\oleacc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\oleacchooks.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\oleaut32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\omadmapi.dll:$CmdTcID [204610] AlternateDataStreams: C:\WINDOWS\system32\omadmclient.exe:$CmdTcID [241666] AlternateDataStreams: C:\WINDOWS\system32\OnDemandConnRouteHelper.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OneBackupHandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OpcServices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OpenAL32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OpenCL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PackageStateRoaming.dll:$CmdTcID [492546] AlternateDataStreams: C:\WINDOWS\system32\pcasvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PhoneCallHistoryApis.dll:$CmdTcID [111616] AlternateDataStreams: C:\WINDOWS\system32\PhotoScreensaver.scr:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PimIndexMaintenance.dll:$CmdTcID [576514] AlternateDataStreams: C:\WINDOWS\system32\PimIndexMaintenanceClient.dll:$CmdTcID [137218] AlternateDataStreams: C:\WINDOWS\system32\Pimstore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\pku2u.dll:$CmdTcID [126976] AlternateDataStreams: C:\WINDOWS\system32\PlayToManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PlayToReceiver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\pnidui.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\pnpclean.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\policymanager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\polstore.dll:$CmdTcID [166144] AlternateDataStreams: C:\WINDOWS\system32\POSyncServices.dll:$CmdTcID [141314] AlternateDataStreams: C:\WINDOWS\system32\PresentationHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PresentationHostProxy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PrintDialogs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PrintDialogs3D.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\printfilterpipelinesvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\profext.dll:$CmdTcID [33536] AlternateDataStreams: C:\WINDOWS\system32\profsvc.dll:$CmdTcID [648194] AlternateDataStreams: C:\WINDOWS\system32\propsys.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provdatastore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provengine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provhandlers.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provisioningcsp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provops.dll:$CmdTcID [286722] AlternateDataStreams: C:\WINDOWS\system32\ProvPluginEng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\provtool.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ProximityService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PsmServiceExtHost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\psmsrv.dll:$CmdTcID [370690] AlternateDataStreams: C:\WINDOWS\system32\puiapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\puiobj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\pwrshplugin.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\qdvd.dll:$CmdTcID [758786] AlternateDataStreams: C:\WINDOWS\system32\qedit.dll:$CmdTcID [1357826] AlternateDataStreams: C:\WINDOWS\system32\quartz.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEA64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EED64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RADCUI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rasapi32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rasgcw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rasman.dll:$CmdTcID [282626] AlternateDataStreams: C:\WINDOWS\system32\rasmans.dll:$CmdTcID [1360898] AlternateDataStreams: C:\WINDOWS\system32\RasMediaManager.dll:$CmdTcID [540674] AlternateDataStreams: C:\WINDOWS\system32\RCoInstII64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\rdpcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rdpcorets.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rdpinput.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rdpudd.dll:$CmdTcID [158722] AlternateDataStreams: C:\WINDOWS\system32\rdvidcrl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RDXService.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RDXTaskFactory.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RecoveryDrive.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ReInfo.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\remoteaudioendpoint.dll:$CmdTcID [44192] AlternateDataStreams: C:\WINDOWS\system32\RemoteNaturalLanguage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RESAMPLEDMO.DLL:$CmdTcID [124732] AlternateDataStreams: C:\WINDOWS\system32\reseteng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\resutils.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RltkAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RMActivate.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RMActivate_isv.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RMActivate_ssp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RMActivate_ssp_isv.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RP3DAA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RP3DHT64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\rpcrt4.dll:$CmdTcID [2398738] AlternateDataStreams: C:\WINDOWS\system32\rpcss.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\rsaenh.dll:$CmdTcID [101748] AlternateDataStreams: C:\WINDOWS\system32\RTCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtDataProc64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEED64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkApi64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkCfg64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkCoLDR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtlCPAPI64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTMediaFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtPgEx64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTSnMg64.cpl:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\samlib.dll:$CmdTcID [47616] AlternateDataStreams: C:\WINDOWS\system32\samsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\scapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SCardDlg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\schannel.dll:$CmdTcID [910338] AlternateDataStreams: C:\WINDOWS\system32\schedsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sdengin2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sdrsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sdshext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SEAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SearchFolder.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SearchIndexer.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SearchProtocolHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SecConfig.efi:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\seclogon.dll:$CmdTcID [62466] AlternateDataStreams: C:\WINDOWS\system32\SECOMN64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\secproc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\secproc_isv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SEHDRA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SensorDataService.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SensorsApi.dll:$CmdTcID [625666] AlternateDataStreams: C:\WINDOWS\system32\sessionmsg.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingMonitor.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_nt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSyncCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSyncHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\setupapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFNHK64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFSS_APO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\shacct.dll:$CmdTcID [92160] AlternateDataStreams: C:\WINDOWS\system32\SharedStartModel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SharedStartModelShim.dll:$CmdTcID [97024] AlternateDataStreams: C:\WINDOWS\system32\ShareHost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sharemediacpl.dll:$CmdTcID [800770] AlternateDataStreams: C:\WINDOWS\system32\SHCore.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\shell32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\shsetup.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SIHClient.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sl3apo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\slcnt64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\slprp64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\sltech64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SmartcardCredentialProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SmiEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SmsRouterSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\spcompat.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SpeechPal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\spoolsv.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppobjs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppsvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppwinob.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sqmapi.dll:$CmdTcID [136376] AlternateDataStreams: C:\WINDOWS\system32\SRAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRCOM.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRH.dll:$CmdTcID [1859586] AlternateDataStreams: C:\WINDOWS\system32\SRHInproc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRRPTR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSHP64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSTSH64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSTSX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSWOW64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\srvcli.dll:$CmdTcID [221170] AlternateDataStreams: C:\WINDOWS\system32\sspicli.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SSShim.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\StikyNot.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\storagewmi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\StoreAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\storewuauth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\StructuredQuery.dll:$CmdTcID [368896] AlternateDataStreams: C:\WINDOWS\system32\SubscriptionMgr.dll:$CmdTcID [81152] AlternateDataStreams: C:\WINDOWS\system32\sud.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sxs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SyncCenter.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\syncmlhook.dll:$CmdTcID [60418] AlternateDataStreams: C:\WINDOWS\system32\syncutil.dll:$CmdTcID [137472] AlternateDataStreams: C:\WINDOWS\system32\SystemEventsBrokerServer.dll:$CmdTcID [189184] AlternateDataStreams: C:\WINDOWS\system32\SystemSettings.Handlers.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SystemSettingsAdminFlows.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo264.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\taskcomp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\taskeng.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Taskmgr.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\taskschd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tbauth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tcpmon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tdh.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tepeqapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tetheringservice.dll:$CmdTcID [299010] AlternateDataStreams: C:\WINDOWS\system32\TextInputFramework.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\themecpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tileobjserver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\TokenBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\TokenBrokerCookies.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tosade.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tosasfapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\toseaeapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tossaeapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tossaemaxapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\TpmTasks.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tpmvsc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tquery.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tsmf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\TSpkg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\TSWorkspace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\twinapi.appcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\twinapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\twinui.appcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\twinui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ubpm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ucrtbase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\udhisapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\uDWM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UIAnimation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UIAutomationCore.dll:$CmdTcID [665600] AlternateDataStreams: C:\WINDOWS\system32\UIRibbon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UIRibbonRes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\unimdm.tsp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Unistore.dll:$CmdTcID [2410498] AlternateDataStreams: C:\WINDOWS\system32\upnpcont.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\upnphost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\urlmon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\user32.dll:$CmdTcID [2733362] AlternateDataStreams: C:\WINDOWS\system32\usercpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UserDataAccountApis.dll:$CmdTcID [128512] AlternateDataStreams: C:\WINDOWS\system32\UserDataLanguageUtil.dll:$CmdTcID [22528] AlternateDataStreams: C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll:$CmdTcID [33280] AlternateDataStreams: C:\WINDOWS\system32\UserDataService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UserDataTimeUtil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UserDataTypeHelperUtil.dll:$CmdTcID [22528] AlternateDataStreams: C:\WINDOWS\system32\userenv.dll:$CmdTcID [56592] AlternateDataStreams: C:\WINDOWS\system32\UserLanguagesCpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\usermgr.dll:$CmdTcID [1425410] AlternateDataStreams: C:\WINDOWS\system32\usermgrcli.dll:$CmdTcID [21248] AlternateDataStreams: C:\WINDOWS\system32\UserMgrProxy.dll:$CmdTcID [117504] AlternateDataStreams: C:\WINDOWS\system32\usocore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UXInit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\uxtheme.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Vault.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vaultcli.dll:$CmdTcID [140288] AlternateDataStreams: C:\WINDOWS\system32\vaultsvc.dll:$CmdTcID [161024] AlternateDataStreams: C:\WINDOWS\system32\vbscript.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\VCardParser.dll:$CmdTcID [97536] AlternateDataStreams: C:\WINDOWS\system32\vds.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vdsutil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\VEEventDispatcher.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\verifiergui.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\VEStoreEventHandlers.dll:$CmdTcID [275458] AlternateDataStreams: C:\WINDOWS\system32\VIDRESZR.DLL:$CmdTcID [57852] AlternateDataStreams: C:\WINDOWS\system32\vssapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vsstrace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\VSSVC.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vss_ps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo-1-1-0-11-1.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WalletService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WavesGUILib64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\wbengine.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wbiosrvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wcmcsp.dll:$CmdTcID [102400] AlternateDataStreams: C:\WINDOWS\system32\wcmsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wcnwiz.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wdc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wdigest.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WebcamUi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\webcheck.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\webservices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\werconcpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wermgr.exe:$CmdTcID [293570] AlternateDataStreams: C:\WINDOWS\system32\werui.dll:$CmdTcID [225280] AlternateDataStreams: C:\WINDOWS\system32\wevtsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wfapigp.dll:$CmdTcID [12800] AlternateDataStreams: C:\WINDOWS\system32\wfdprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wiaaut.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wiarpc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wifinetworkmanager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wifiprofilessettinghandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\win32kbase.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\win32kfull.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\win32spl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winbici.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winbrand.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.AccountsControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll:$CmdTcID [136960] AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Cortana.Desktop.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Cortana.OneCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Windows.Data.Pdf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Enumeration.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Midi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Picker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.PointOfService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Scanners.dll:$CmdTcID [107264] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.SmartCards.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.Usb.dll:$CmdTcID [226560] AlternateDataStreams: C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Gaming.Preview.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Globalization.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Windows.Graphics.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Internal.Management.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Audio.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Editing.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Import.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.MediaControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Speech.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Streaming.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.Connectivity.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.HostName.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.Proximity.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.Vpn.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Speech.Pal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.StateRepository.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.StateRepositoryClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\windows.storage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Storage.Search.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.BioFeedback.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Cred.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Immersive.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Logon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.PicturePassword.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Search.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Shell.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Web.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.Web.Http.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WindowsCodecs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WindowsCodecsExt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WindowsCodecsRaw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winhttp.dll:$CmdTcID [1712130] AlternateDataStreams: C:\WINDOWS\system32\wininet.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wininit.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winipcfile.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winipcsecproc.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\winload.efi:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winload.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winlogon.exe:$CmdTcID [1157122] AlternateDataStreams: C:\WINDOWS\system32\winmde.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winmsipc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winresume.efi:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winresume.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\WinSAT.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winsku.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winspool.drv:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wintrust.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WinTypes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wkscli.dll:$CmdTcID [39020] AlternateDataStreams: C:\WINDOWS\system32\wlanapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlancfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WLanConn.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlangpui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WlanMediaManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WlanMM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlanmsm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlanpref.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlansec.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlansvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlanui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wldp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlidcli.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlidprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlidsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMADMOD.DLL:$CmdTcID [1575442] AlternateDataStreams: C:\WINDOWS\system32\WMADMOE.DLL:$CmdTcID [1503986] AlternateDataStreams: C:\WINDOWS\system32\WMALFXGFXDSP.dll:$CmdTcID [908532] AlternateDataStreams: C:\WINDOWS\system32\WMASF.DLL:$CmdTcID [149800] AlternateDataStreams: C:\WINDOWS\system32\wmdrmdev.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wmdrmsdk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMNetMgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMPDMC.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WmpDui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMPhoto.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMSPDMOD.DLL:$CmdTcID [2019330] AlternateDataStreams: C:\WINDOWS\system32\WMSPDMOE.DLL:$CmdTcID [2511874] AlternateDataStreams: C:\WINDOWS\system32\WMVCORE.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMVDECOD.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WMVENCOD.DLL:$CmdTcID [3982242] AlternateDataStreams: C:\WINDOWS\system32\WMVSDECD.DLL:$CmdTcID [690162] AlternateDataStreams: C:\WINDOWS\system32\WMVSENCD.DLL:$CmdTcID [223744] AlternateDataStreams: C:\WINDOWS\system32\WMVXENCD.DLL:$CmdTcID [1268738] AlternateDataStreams: C:\WINDOWS\system32\workfolderssvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Wpc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpccpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WpcMon.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WpcWebSync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpdshext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WPDShServiceObj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpnapps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpncore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpninprc.dll:$CmdTcID [149506] AlternateDataStreams: C:\WINDOWS\system32\wpnprv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpr.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WPTaskScheduler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wrap_oal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ws2_32.dll:$CmdTcID [843074] AlternateDataStreams: C:\WINDOWS\system32\WSClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wsecedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WsmAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WsmAuto.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wsmprovhost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WsmSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WsmWmiPl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wsp_fs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wsp_health.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wsqmcons.exe:$CmdTcID [451586] AlternateDataStreams: C:\WINDOWS\system32\WSService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WSShared.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WSSync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wuapi.dll:$CmdTcID [392192] AlternateDataStreams: C:\WINDOWS\system32\wuaueng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WUDFPlatform.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WUDFx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WUDFx02000.dll:$CmdTcID [335616] AlternateDataStreams: C:\WINDOWS\system32\wudriver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wups.dll:$CmdTcID [95234] AlternateDataStreams: C:\WINDOWS\system32\wups2.dll:$CmdTcID [16640] AlternateDataStreams: C:\WINDOWS\system32\wusa.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wuuhext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WwaApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WWAHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WWanAPI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wwancfg.dll:$CmdTcID [147458] AlternateDataStreams: C:\WINDOWS\system32\wwanconn.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wwanmm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wwansvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\XblAuthManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\XboxNetApiSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\XpsDocumentTargetPrint.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\XpsFilt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\XpsPrint.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\xpsrchvw.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\xpsservices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\YamahaAE.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\YamahaAE2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\ztrace_maps.dll:$CmdTcID [17408] AlternateDataStreams: C:\WINDOWS\SysWOW64\ac3filter.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\aclui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\adsmsext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\advapi32.dll:$CmdTcID [995794] AlternateDataStreams: C:\WINDOWS\SysWOW64\apphelp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AppointmentApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\apprepapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\apprepsync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\appwiz.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AppxAllUserStore.dll:$CmdTcID [90544] AlternateDataStreams: C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll:$CmdTcID [155904] AlternateDataStreams: C:\WINDOWS\SysWOW64\AppxPackaging.dll:$CmdTcID [1684482] AlternateDataStreams: C:\WINDOWS\SysWOW64\AppxSip.dll:$CmdTcID [266242] AlternateDataStreams: C:\WINDOWS\SysWOW64\asycfilt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\atmfd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\atmlib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AUDIOKSE.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AudioSes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AuthBroker.dll:$CmdTcID [52480] AlternateDataStreams: C:\WINDOWS\SysWOW64\authfwcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\authui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\azroleui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\BCP47Langs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\bcryptprimitives.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\BingMaps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\blackbox.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\browcli.dll:$CmdTcID [21760] AlternateDataStreams: C:\WINDOWS\SysWOW64\BugTrap.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cabinet.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\CallHistoryClient.dll:$CmdTcID [262146] AlternateDataStreams: C:\WINDOWS\SysWOW64\catsrvut.dll:$CmdTcID [831490] AlternateDataStreams: C:\WINDOWS\SysWOW64\cemapi.dll:$CmdTcID [100608] AlternateDataStreams: C:\WINDOWS\SysWOW64\certca.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\certcli.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CertEnroll.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\certmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakra.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakradiag.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ChatApis.dll:$CmdTcID [278784] AlternateDataStreams: C:\WINDOWS\SysWOW64\CheckNetIsolation.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cic.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Clipc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\clusapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cmdl32.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cmipnpinstall.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\COLORCNV.DLL:$CmdTcID [94016] AlternateDataStreams: C:\WINDOWS\SysWOW64\combase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\comdlg32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\comsvcs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\comuid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ContactApis.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CoreMessaging.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CoreUIComponents.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CPFilters.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CredProvDataModel.dll:$CmdTcID [168192] AlternateDataStreams: C:\WINDOWS\SysWOW64\credprovhost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\credprovs.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\credssp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\crypt32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cryptui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\d2d1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d10level9.dll:$CmdTcID [251252] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d10warp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d11.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d9.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_47.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\DafPrintProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dbgcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dbgeng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\DbgModel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dcomp.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\devenum.dll:$CmdTcID [41048] AlternateDataStreams: C:\WINDOWS\SysWOW64\deviceaccess.dll:$CmdTcID [404482] AlternateDataStreams: C:\WINDOWS\SysWOW64\deviceassociation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\DevicePairing.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\devmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\directmanipulation.dll:$CmdTcID [227256] AlternateDataStreams: C:\WINDOWS\SysWOW64\Display.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dlnashext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dmdskmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dot3gpui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dot3ui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\drmmgrtn.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\drvstore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dui70.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\duser.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dwmcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\DWrite.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dxgi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dxtrans.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\eapp3hst.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\eappcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\eappgnui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\eapphost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\eappprxy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\easwrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\edgehtml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\efswrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\els.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\EmailApis.dll:$CmdTcID [1050626] AlternateDataStreams: C:\WINDOWS\SysWOW64\EncDec.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\esent.dll:$CmdTcID [5279746] AlternateDataStreams: C:\WINDOWS\SysWOW64\evr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ExecModelClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\expand.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\explorer.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ExplorerFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ExSMime.dll:$CmdTcID [447490] AlternateDataStreams: C:\WINDOWS\SysWOW64\extrac32.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll:$CmdTcID [9472] AlternateDataStreams: C:\WINDOWS\SysWOW64\filemgmt.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\findnetprinters.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\FirewallAPI.dll:$CmdTcID [182528] AlternateDataStreams: C:\WINDOWS\SysWOW64\fontdrvhost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\fwbase.dll:$CmdTcID [326658] AlternateDataStreams: C:\WINDOWS\SysWOW64\fwcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll:$CmdTcID [327682] AlternateDataStreams: C:\WINDOWS\SysWOW64\FWPUCLNT.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\FwRemoteSvr.dll:$CmdTcID [26112] AlternateDataStreams: C:\WINDOWS\SysWOW64\GamePanel.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\gameux.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\gdi32.dll:$CmdTcID [2731170] AlternateDataStreams: C:\WINDOWS\SysWOW64\GdiPlus.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Geolocation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\GlobCollationHost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\gpapi.dll:$CmdTcID [56316] AlternateDataStreams: C:\WINDOWS\SysWOW64\gpedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\hevcdecoder.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\hgcpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\hlink.dll:$CmdTcID [50176] AlternateDataStreams: C:\WINDOWS\SysWOW64\hnetcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iassvcs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\IdCtrls.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ieapfltr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iepeers.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\ieproxy.dll:$CmdTcID [591874] AlternateDataStreams: C:\WINDOWS\SysWOW64\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ieui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\inetcomm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\input.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\InputService.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\IoTAssignedAccessLockFramework.dll:$CmdTcID [93186] AlternateDataStreams: C:\WINDOWS\SysWOW64\ipsecsnp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ipsmsnap.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\JpMapControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\jscript.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\jscript9.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\KBDAZE.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\SysWOW64\KBDAZEL.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\SysWOW64\KBDAZST.DLL:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\SysWOW64\kbdgeoqw.dll:$CmdTcID [3584] AlternateDataStreams: C:\WINDOWS\SysWOW64\kerberos.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\kernel32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\KernelBase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ksproxy.ax:$CmdTcID [117504] AlternateDataStreams: C:\WINDOWS\SysWOW64\libFLAC.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LicenseManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\licensingdiag.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LocationApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LockAppBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LockAppHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LogonController.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Magnification.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Magnify.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\makecab.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\MapConfiguration.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MapControlCore.dll:$CmdTcID [1355778] AlternateDataStreams: C:\WINDOWS\SysWOW64\MbaeApi.dll:$CmdTcID [909314] AlternateDataStreams: C:\WINDOWS\SysWOW64\MbaeApiPublic.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mbsmsapi.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\MCRecvSrc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mdmregistration.dll:$CmdTcID [72960] AlternateDataStreams: C:\WINDOWS\SysWOW64\MessagingDataModel2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MFCaptureEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfds.dll:$CmdTcID [1317074] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfh264enc.dll:$CmdTcID [1112066] AlternateDataStreams: C:\WINDOWS\SysWOW64\MFMediaEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetsrc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfplat.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfps.dll:$CmdTcID [58364] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsvr.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\mftranscode.dll:$CmdTcID [417378] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfvdsp.dll:$CmdTcID [36404] AlternateDataStreams: C:\WINDOWS\SysWOW64\MFWMAAEC.DLL:$CmdTcID [809986] AlternateDataStreams: C:\WINDOWS\SysWOW64\mispace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mmc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mmcbase.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\mmcndmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mmcshext.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\mmsys.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mos.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MosHostClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MP3DMOD.DLL:$CmdTcID [201426] AlternateDataStreams: C:\WINDOWS\SysWOW64\MP43DECD.DLL:$CmdTcID [556850] AlternateDataStreams: C:\WINDOWS\SysWOW64\MP4SDECD.DLL:$CmdTcID [184388] AlternateDataStreams: C:\WINDOWS\SysWOW64\MPG4DECD.DLL:$CmdTcID [554802] AlternateDataStreams: C:\WINDOWS\SysWOW64\mprddm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mprdim.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mqrt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MrmCoreR.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MSAJApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mscms.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msctf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msctfuimanager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msftedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtmled.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msjava.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\msmpeg2adec.dll:$CmdTcID [1764418] AlternateDataStreams: C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [1743874] AlternateDataStreams: C:\WINDOWS\SysWOW64\msmpeg2vdec.dll:$CmdTcID [4890258] AlternateDataStreams: C:\WINDOWS\SysWOW64\msnetobj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msorcl32.dll:$CmdTcID [323586] AlternateDataStreams: C:\WINDOWS\SysWOW64\mspaint.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msscntrs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msscp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mssph.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mssphtb.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mssrch.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mssvp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mstsc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mstscax.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msv1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msvcp_win.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MSVidCtl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mswsock.dll:$CmdTcID [613058] AlternateDataStreams: C:\WINDOWS\SysWOW64\msxml3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mtxoci.dll:$CmdTcID [236546] AlternateDataStreams: C:\WINDOWS\SysWOW64\mycomput.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NAPCRYPT.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NaturalLanguage6.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ncryptprov.dll:$CmdTcID [134400] AlternateDataStreams: C:\WINDOWS\SysWOW64\ncryptsslp.dll:$CmdTcID [194194] AlternateDataStreams: C:\WINDOWS\SysWOW64\ndfapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\netapi32.dll:$CmdTcID [34616] AlternateDataStreams: C:\WINDOWS\SysWOW64\netcenter.dll:$CmdTcID [585728] AlternateDataStreams: C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe:$CmdTcID [114690] AlternateDataStreams: C:\WINDOWS\SysWOW64\netcfgx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupApi.dll:$CmdTcID [39088] AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\netshell.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ninput.dll:$CmdTcID [148480] AlternateDataStreams: C:\WINDOWS\SysWOW64\nlmgp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NotificationObjFactory.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nshwfp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ntdll.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ntshrui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvaudcap32v.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuda.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuvid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvd3dum.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncMFTH264.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncodeAPI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvFBC.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFR.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFROpenGL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvinit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvoglshim32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvoglv32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvopencl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvStreaming.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvumdshim.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvwgf2um.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\odbcconf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\oemlicense.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\offreg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ole32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\oleacc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\oleacchooks.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\oleaut32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\olepro32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OpcServices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OpenAL32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OpenCL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PackageStateRoaming.dll:$CmdTcID [97792] AlternateDataStreams: C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll:$CmdTcID [344066] AlternateDataStreams: C:\WINDOWS\SysWOW64\PhotoScreensaver.scr:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll:$CmdTcID [105474] AlternateDataStreams: C:\WINDOWS\SysWOW64\Pimstore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\pku2u.dll:$CmdTcID [412674] AlternateDataStreams: C:\WINDOWS\SysWOW64\PlayToManager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PnkBstrA.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PnkBstrB.ex0:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PnkBstrB.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PnkBstrB.xtr:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\policymanager.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\polstore.dll:$CmdTcID [582658] AlternateDataStreams: C:\WINDOWS\SysWOW64\POSyncServices.dll:$CmdTcID [28160] AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationHostProxy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PrintConfig.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PrintDialogs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\profext.dll:$CmdTcID [106498] AlternateDataStreams: C:\WINDOWS\SysWOW64\propsys.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\provcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\puiapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\puiobj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\pwrshplugin.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\qdvd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\qedit.dll:$CmdTcID [286720] AlternateDataStreams: C:\WINDOWS\SysWOW64\quartz.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rasapi32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rasgcw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rasman.dll:$CmdTcID [61696] AlternateDataStreams: C:\WINDOWS\SysWOW64\rdpcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rdvidcrl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ReAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll:$CmdTcID [149762] AlternateDataStreams: C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [465794] AlternateDataStreams: C:\WINDOWS\SysWOW64\resutils.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RltkAPO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\RMActivate.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RMActivate_isv.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RMActivate_ssp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rpcrt4.dll:$CmdTcID [1411042] AlternateDataStreams: C:\WINDOWS\SysWOW64\rsaenh.dll:$CmdTcID [91952] AlternateDataStreams: C:\WINDOWS\SysWOW64\RTMediaFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\samlib.dll:$CmdTcID [121858] AlternateDataStreams: C:\WINDOWS\SysWOW64\SCardDlg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\schannel.dll:$CmdTcID [746498] AlternateDataStreams: C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\SearchFilterHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SearchFolder.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SearchIndexer.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SearchProtocolHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SECOMN32.DLL:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\secproc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\secproc_isv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SensorsApi.dll:$CmdTcID [506882] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingMonitor.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSyncCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSyncHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\setupapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SFCOM.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\shacct.dll:$CmdTcID [279554] AlternateDataStreams: C:\WINDOWS\SysWOW64\ShareHost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SHCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\shell32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\shsetup.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\sppcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\sqmapi.dll:$CmdTcID [458706] AlternateDataStreams: C:\WINDOWS\SysWOW64\SRCOM.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\SRH.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SRHInproc.dll:$CmdTcID [2885634] AlternateDataStreams: C:\WINDOWS\SysWOW64\srvcli.dll:$CmdTcID [146722] AlternateDataStreams: C:\WINDOWS\SysWOW64\sspicli.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\SSShim.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\storagewmi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\StructuredQuery.dll:$CmdTcID [251136] AlternateDataStreams: C:\WINDOWS\SysWOW64\sud.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\sxs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SyncCenter.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\taskcomp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\taskeng.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Taskmgr.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\taskschd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tbauth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tdh.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\TextInputFramework.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\themecpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tmpE048.tmp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\TokenBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tquery.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tsmf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\TSpkg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\twinapi.appcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\twinapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\twinui.appcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\twinui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ucrtbase.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\udhisapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAnimation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAutomationCore.dll:$CmdTcID [2208770] AlternateDataStreams: C:\WINDOWS\SysWOW64\UIRibbon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\UIRibbonRes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\unimdm.tsp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Unistore.dll:$CmdTcID [464128] AlternateDataStreams: C:\WINDOWS\SysWOW64\upnpcont.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\upnphost.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\urlmon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\usbceip.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\user32.dll:$CmdTcID [2621762] AlternateDataStreams: C:\WINDOWS\SysWOW64\usercpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserDataAccountApis.dll:$CmdTcID [391170] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll:$CmdTcID [18944] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll:$CmdTcID [27904] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll:$CmdTcID [75778] AlternateDataStreams: C:\WINDOWS\SysWOW64\userenv.dll:$CmdTcID [46496] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\usermgrcli.dll:$CmdTcID [66562] AlternateDataStreams: C:\WINDOWS\SysWOW64\UserMgrProxy.dll:$CmdTcID [79872] AlternateDataStreams: C:\WINDOWS\SysWOW64\usoapi.dll:$CmdTcID [29184] AlternateDataStreams: C:\WINDOWS\SysWOW64\UXInit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\uxtheme.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Vault.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vaultcli.dll:$CmdTcID [101888] AlternateDataStreams: C:\WINDOWS\SysWOW64\vbscript.dll:$CmdTcID [32] AlternateDataStreams: C:\WINDOWS\SysWOW64\vcamp140.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\VCardParser.dll:$CmdTcID [75264] AlternateDataStreams: C:\WINDOWS\SysWOW64\VEEventDispatcher.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\verifiergui.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\VIDRESZR.DLL:$CmdTcID [53976] AlternateDataStreams: C:\WINDOWS\SysWOW64\vssapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vsstrace.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-11-1.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wcnwiz.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wdc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wdigest.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WebcamUi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\webcheck.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\webservices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wer.dll:$CmdTcID [1058914] AlternateDataStreams: C:\WINDOWS\SysWOW64\wermgr.exe:$CmdTcID [282306] AlternateDataStreams: C:\WINDOWS\SysWOW64\werui.dll:$CmdTcID [196864] AlternateDataStreams: C:\WINDOWS\SysWOW64\wfapigp.dll:$CmdTcID [9728] AlternateDataStreams: C:\WINDOWS\SysWOW64\wfdprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wiaaut.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\wimgapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winbrand.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll:$CmdTcID [97536] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll:$CmdTcID [84224] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll:$CmdTcID [622594] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Globalization.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Graphics.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll:$CmdTcID [96512] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Import.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.StateRepository.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\windows.storage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.dll:$CmdTcID [232192] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Search.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Web.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Web.Http.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WindowsCodecs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winhttp.dll:$CmdTcID [333824] AlternateDataStreams: C:\WINDOWS\SysWOW64\wininet.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winipcfile.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winipcsecproc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winmde.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winmsipc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winsku.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winspool.drv:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wintrust.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WinTypes.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wkscli.dll:$CmdTcID [27904] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlancfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WLanConn.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlangpui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WlanMM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanmsm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanpref.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlansec.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wldp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlidcli.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlidprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMADMOD.DLL:$CmdTcID [347876] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMADMOE.DLL:$CmdTcID [1392386] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMASF.DLL:$CmdTcID [124988] AlternateDataStreams: C:\WINDOWS\SysWOW64\wmdrmdev.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wmdrmsdk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMNetMgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMPDMC.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WmpDui.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMPhoto.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMSPDMOD.DLL:$CmdTcID [445440] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMSPDMOE.DLL:$CmdTcID [2140162] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVCORE.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVDECOD.DLL:$CmdTcID [4918194] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVENCOD.DLL:$CmdTcID [1081032] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVSDECD.DLL:$CmdTcID [611554] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVSENCD.DLL:$CmdTcID [204544] AlternateDataStreams: C:\WINDOWS\SysWOW64\WMVXENCD.DLL:$CmdTcID [1494018] AlternateDataStreams: C:\WINDOWS\SysWOW64\Wpc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wpdshext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WPDShServiceObj.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wpnapps.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\wrap_oal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ws2_32.dll:$CmdTcID [744738] AlternateDataStreams: C:\WINDOWS\SysWOW64\WSClient.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wsecedit.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WsmAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WsmAuto.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wsmprovhost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WsmSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WsmWmiPl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_fs.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_health.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WSShared.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WSSync.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wuapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wudriver.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\wvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WWAHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WWanAPI.dll:$CmdTcID [214064] AlternateDataStreams: C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\XpsFilt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\XpsPrint.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\xpsrchvw.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\xpsservices.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\xvidcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ztrace_maps.dll:$CmdTcID [59394] AlternateDataStreams: C:\WINDOWS\system32\Drivers\afd.sys:$CmdTcID [1155778] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ahcache.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\bowser.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\bridge.sys:$CmdTcID [57344] AlternateDataStreams: C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\buttonconverter.sys:$CmdTcID [72706] AlternateDataStreams: C:\WINDOWS\system32\Drivers\clfs.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\cng.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dbx-canary.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dbx-dev.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dbx-stable.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dfsc.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgkrnl.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms1.sys:$CmdTcID [790178] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms2.sys:$CmdTcID [1011394] AlternateDataStreams: C:\WINDOWS\system32\Drivers\fastfat.sys:$CmdTcID [663234] AlternateDataStreams: C:\WINDOWS\system32\Drivers\fvevol.sys:$CmdTcID [316592] AlternateDataStreams: C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS:$CmdTcID [813730] AlternateDataStreams: C:\WINDOWS\system32\Drivers\genericusbfn.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\gpuenergydrv.sys:$CmdTcID [4096] AlternateDataStreams: C:\WINDOWS\system32\Drivers\h647906.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\hdaudbus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\HdAudio.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\http.sys:$CmdTcID [505008] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ksecdd.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ksecpkg.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64bus.inf:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64bus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64diag.inf:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64diag.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64modem.inf:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64modem.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxdav.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb10.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb20.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ndis.sys:$CmdTcID [2337474] AlternateDataStreams: C:\WINDOWS\system32\Drivers\netbt.sys:$CmdTcID [545794] AlternateDataStreams: C:\WINDOWS\system32\Drivers\netio.sys:$CmdTcID [918210] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ntfs.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nvhda64v.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nvlddmkm.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nvvad64v.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nwifi.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\pci.sys:$CmdTcID [655042] AlternateDataStreams: C:\WINDOWS\system32\Drivers\pdc.sys:$CmdTcID [199330] AlternateDataStreams: C:\WINDOWS\system32\Drivers\portcls.sys:$CmdTcID [160000] AlternateDataStreams: C:\WINDOWS\system32\Drivers\rasl2tp.sys:$CmdTcID [52480] AlternateDataStreams: C:\WINDOWS\system32\Drivers\rmcast.sys:$CmdTcID [73984] AlternateDataStreams: C:\WINDOWS\system32\Drivers\RTKVHD64.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\scfilter.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdbus.sys:$CmdTcID [139176] AlternateDataStreams: C:\WINDOWS\system32\Drivers\serial.sys:$CmdTcID [167938] AlternateDataStreams: C:\WINDOWS\system32\Drivers\srv.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\srv2.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\srvnet.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\tcpip.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\tdx.sys:$CmdTcID [58032] AlternateDataStreams: C:\WINDOWS\system32\Drivers\tm.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\usb8023.sys:$CmdTcID [11264] AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbd.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\USBHUB3.SYS:$CmdTcID [1032898] AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbport.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbser.sys:$CmdTcID [134146] AlternateDataStreams: C:\WINDOWS\system32\Drivers\USBSTOR.SYS:$CmdTcID [63920] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vhdmp.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Wdf01000.sys:$CmdTcID [1788514] AlternateDataStreams: C:\WINDOWS\system32\Drivers\WdiWiFi.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\hid7906.sys:$CmdTcID [64] AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0] AlternateDataStreams: C:\Users\Marcin\Desktop\Download Cats Screensavers Jeff November Funny Cat Wallpaper 1440x900 ....jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Desktop\WAVistaWin7.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\-zipper_chain_stich.abr.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\12186560_1047889715224007_1618780464514609083_o.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\13669354_1108953392501983_7353420305200191034_o.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\13874148644564.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\14524963_1229223937097654_8251898140003302062_o.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\14882234_1297677366911906_8370870775299620461_o.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\14885846_1298522250160751_436604721_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\14914611_1298521930160783_900813412_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\1604747_856447387701575_9049926911761856125_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\2.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\24.1x05.4.00.am_5.00.am.ac3.dvdrip_ws_xvid-fov.srt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\24.4.00.a.m.5.00.a.m.(6597637).nfo:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\24_Sezon_1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\24_Sezon_5.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\2x-nvflashdrivers.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\2x-v10b-1300166062-nvflash.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3163017.csv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\35626426661_____00 (1).cad:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\35626426661_____00.cad:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\35626426661_____00.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3D326400100 (1).PDF:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3D326400100 (2).PDF:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3D326400100.PDF:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\3xhumed-Mega-Games-Pack-29-Gothic-2.ico:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\4.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\5.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\6687823.htm:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\agents.of.s.h.i.e.l.d.s04.e07.deals.with.our.devils.(2016).eng.1cd.(6812369).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Alimenty Luty 2017.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Alimenty pazdziernik 2016.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Alimenty Styczeń 2017.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\All-New X-Men (001-012+) (2016-) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\All_This_Down_Time_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\All_This_Down_Time_Sting.wav:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\artykul---nadciaga-pokolenie-malych-tyranow.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Batman.Episode.3-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Batman.Episode.5-CODEX.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\BETTER.CALL.SAUL.SEASON.2.COMPLETE.HDTV.720.264.cenobites.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x04_Gloves_Off.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x05_Rebecca.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x06_Bali_Hai.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x07_Inflatable.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x08_Fifi.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x09_Nailed.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Better_Call_Saul_02x10_Klick.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\black-763784_1280.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\brakujace.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Breaking_Bad_Season_5_Complete.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Carnage 001 (2016) (digital) (Oroboros-DCP).cbr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\carrie_fisher_princess_leia_xvi_by_dave_daring_d62_by_dave_daring-d62qtyz.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\cavestory.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\cavestoryen.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\chainimage-leather-texture-black-free-high-resolution-photo-dimensions-3888.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Creative Cloud Uninstaller.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\CreativeCloudSet-Up.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\CreativeCloudSet-Up.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Dark_Lotus_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dexter.s07.e01.are.you.(2012).pol.1cd.(6041740).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dexter.s07.e02.sunshine.and.frosty.swirl.(2012).pol.1cd.(6043057).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\df_43_05_win (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\df_43_05_win.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dLpihZ.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\DOC.PDF:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dou_1006.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Download Cats Screensavers Jeff November Funny Cat Wallpaper 1440x900 ....jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Dragons.Dogma.Dark.Arisen-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\drive-download-20161211T165626Z.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dscf6657 (1).jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\dscf6657.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\DuelystLauncher-x64-v0.0.10.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\DuelystLauncher-x64-v0.0.10.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Duik_15.11_installer.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\Duik_15.11_installer.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\DungeonSet Triangles.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\e3c1643.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\F306CDCBBED0648FAED62781391B74DC806B0A3C.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\fdl_string_twine.abr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\ff-0413011e6e5c81988deaf89ec5b22907,589a0505,96565eb_480.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\filmik - lektor.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\fotolia_68577493.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\fotoprzodityl.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\FRST64.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\FRST64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\fur_brushes_by_nathies_stock-d3eqkc6.abr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\g2notr-systempack-1.6.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Game.of.Thrones.S06E06.HDTV.x264-KILLERS.mp4.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Game_of_Thrones_06x10_The_Winds_of_Winter.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\GD-148-pokwitowanie-odbioru-gotowki.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\gothic2_fix-2.6.0.0-rev2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\herkules.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Hero_Theme_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\history.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Howling_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\identity.(2003).pol.1cd.(5532700).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\IMAG0297.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\INF(v10.1.1.8).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Into_The_Badlands_Season_1_HDTV.XviD-AFG[Pawulon].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Into_the_Wormhole_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Into_the_Wormhole_Sting.wav:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Invisible.Inc-CODEX.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\j08egy55.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\j08egy55.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\JavaSetup8u66.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Marcin\Downloads\JavaSetup8u66.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin\Downloads\JoJo's.Bizarre.Adventure.(2012).torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\katalogpierwszy (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\katalogpierwszy.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\kav_rescue_10.iso:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\ksiega znaku KPP.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Lan(v20.2_PV_v2).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\LG L9.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\LGMobileSupportTool.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\logo wektorowe.ai:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Lost - Sezon 1 [DVDRip.XviD][Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\lq72055a1465e2444046448b8cebea109e.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\luke-cage-s01e05-pl.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\m2 leather.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\mbid-0a532441-7c2a-4b4a-8984-b54188fa3f0b_archive.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\ME(v11.0.0.1158_MEI).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\MediaCreationTool (1).exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\MediaCreationTool (1).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\MediaCreationTool.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\MediaCreationTool.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin\Downloads\mingw-w64-stable-latest.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\moc_na_ty.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Moja Platnosc 02.wav:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\mostostal_zabrze.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\nagelseries36.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e01.descenso.(2015).pol.1cd.(6298969).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e02.the.sword.of.simon.bolivar.(2015).pol.1cd.(6343986).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e03.the.men.of.always.(2015).pol.1cd.(6293003).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e04.the.palace.in.flames.(2015).pol.1cd.(6318530).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e05.there.will.be.a.future.(2015).pol.1cd.(6296679).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e06.explosivos.(2015).hrv.1cd.(6579882).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e06.explosivos.(2015).pol.1cd.(6500322).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e07.you.will.cry.tears.of.blood.(2015).pol.1cd.(6425358).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e08.la.gran.mentira.(2015).pol.1cd.(6316081).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e09.la.catedral.(2015).pol.1cd.(6319034).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\narcos.s01.e10.despegue.(2015).pol.1cd.(6465533).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Narcos.S01E01.720p.WEBRiP.x265.ShAaNiG.txt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Narcos.S01E10.1080p.WEBRip.x264.AC3.6CH-KiMO.srt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\neverhood.dat:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\neverhood.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Nokia_Best_Sms_freetone.at.ua.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Oldboy.2013.1080p.BluRay.x264.YIFY.txt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\OriginThinSetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\OWS.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\pacshot_4_12a.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\PeridexisErrant's Starter Pack 0.43.03-r09.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\PexelsPhotoshopSetup.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\PexelsSetup-1.1.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\PexelsSetup-1.1.0.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin\Downloads\Pillars_of_Eternity-FLT-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\PL.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Plan.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\plaszcz-z-futrem__przod.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\potwierdzenie (10).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Potwierdzenie123.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\ppt-tmmx.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przedszkole 06.10.2016.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przedszkole 09.09.2016 (1).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przedszkole 09.09.2016.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przedszkole 2017.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przedszkole.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Przekazanie+PO.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\rada rodz za 5 m-cy z gory.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Realtek_Audio(v7614).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Rope_Brush_ai.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\rosjanka-angela-nikolau-i-jej-ryzykowna-seria-zdjec-sefie_8652.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\rosjanka-tralalalnka.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\scummvm-1.9.0.2-win32.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\scummvm-1.9.0.2-win32.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Seasons.after.Fall-RELOADED-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\send_contacts.vcf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\SmartConnect(v5.0.10.2907_32bit).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\SmartConnect(v5.0.10.2907_64bit).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\sorted.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Speakeasy_in_Crescent_City_Sting.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\speccy.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\speccy.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin\Downloads\Spline_Effector_Test.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Star Wars - Imperial March (Goblins from Mars Trap Remix ) 2015.wav:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stitch_by_boyingopaw_abr.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e01.chapter.one.the.vanishing.of.will.byers.(2016).pol.1cd.(6687822).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e02.chapter.two.the.weirdo.on.maple.street.(2016).pol.1cd.(6687823).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e03.chapter.three.holly.jolly.(2016).pol.1cd.(6687824).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e04.chapter.four.the.body.(2016).pol.1cd.(6687856).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e05.chapter.five.the.flea.and.the.acrobat.(2016).pol.1cd.(6687928).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e06.chapter.six.the.monster.(2016).pol.1cd.(6687622) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e06.chapter.six.the.monster.(2016).pol.1cd.(6687622).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e06.chapter.six.the.monster.(2016).pol.1cd.(6687998) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e06.chapter.six.the.monster.(2016).pol.1cd.(6687998).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e07.chapter.seven.the.bathtub.(2016).pol.1cd.(6690073) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e07.chapter.seven.the.bathtub.(2016).pol.1cd.(6690073).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e08.chapter.eight.the.upside.down.(2016).pol.1cd.(6690134) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\stranger.things.s01.e08.chapter.eight.the.upside.down.(2016).pol.1cd.(6690134).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Straszny dom (Monster House) _2006_ [DVDRip] [XVID] Dubbing PL.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\tabliczka-na-ściane.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\tabliczka-z-nazwiskiem.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\TeamViewer_Setup_pl.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\TeamViewer_Setup_pl.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\texture-metal-carbon-carbon-black_1600x900_sc.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\texture-metal-carbon-carbon-black_1920x1080_sc (1).jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\texture-metal-carbon-carbon-black_1920x1080_sc (2).jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\texture-metal-carbon-carbon-black_1920x1080_sc.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\The Walking Dead Comics (1-138 + Specials) - GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\The.Darkness.II.Limited.Edition-PROPHET.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\The.Hateful.Eight.2015.DVDScr.XVID.AC3.HQ.Hive-CM8.srt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.martian.(2015).pol.1cd.(6433838).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\The.Martian.2015.HDRip.XviD-ETRG.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\The.Wire.1x01.The.Target.DvDRip.XviD.AC3.Thomilla.txt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e01.the.target.(2002).pol.1cd.(3643386).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e02.the.detail.(2002).pol.1cd.(3629285).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e03.the.buys.(2002).pol.1cd.(3357663).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e04.old.cases.(2002).pol.1cd.(3731850).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e05.the.pager.(2002).pol.1cd.(3643870) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e05.the.pager.(2002).pol.1cd.(3643870) (2).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e05.the.pager.(2002).pol.1cd.(3643870) (3).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e05.the.pager.(2002).pol.1cd.(3643870).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e05.the.pager.(2002).pol.1cd.(6666317).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e06.the.wire.(2002).pol.1cd.(3732342).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e07.one.arrest.(2002).pol.1cd.(3732678).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e08.lessons.(2002).pol.1cd.(3498684).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e09.game.day.(2002).pol.1cd.(3498761).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e10.the.cost.(2002).pol.1cd.(3733482).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e11.the.hunt.(2002).pol.1cd.(3336949) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e11.the.hunt.(2002).pol.1cd.(3336949).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e12.cleaning.up.(2002).pol.1cd.(3499314).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the.wire.s01.e13.sentencing.(2002).pol.1cd.(3499361).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the_witcher_12-wallpaper-1440x900.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\the_witcher_3_wild_hunt_ciri_fanart-wallpaper-1440x900.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\tlj.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\UpTestEX_BY_BRIDE_2014.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\urc1001.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Usługi+remontowo+budowlane+krzywe+v7.cdr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\V20O_00.kdz:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Valkyria.Chronicles-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Video_Standards.svg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\WA9B3569.JPG:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\WA9B4108.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\WA9B4109.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e01.where.paradise.is.home.(2015).pol.1cd.(6154274).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e02.do.not.discuss.your.life.before.(2015).pol.1cd.(6181340).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e04.one.of.our.senior.realtors.has.chosen.to.retire.(2015).pol.1cd.(6195228).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e05.the.truth.(2015).pol.1cd.(6268142).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e06.choices.(2015).pol.1cd.(6211952).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s01.e08.the.friendliest.place.on.earth.(2015).pol.1cd.(6233226).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Wayward.Pines.S01E02.720p.HDTV.X264-DIMENSION.srt:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e01.enemy.lines.(2016).pol.1cd.(6638845) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e01.enemy.lines.(2016).pol.1cd.(6638845).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e02.blood.harvest.(2016).pol.1cd.(6647229) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e02.blood.harvest.(2016).pol.1cd.(6647229).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e03.once.upon.a.time.in.wayward.pines.(2016).pol.1cd.(6656195).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e04.exit.strategy.(2016).pol.1cd.(6664693).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e04.exit.strategy.(2016).pol.1cd.(6667353).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e05.sound.the.alarm.(2016).pol.1cd.(6669051).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e07.time.will.tell.(2016).pol.1cd.(6679586) (1).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e07.time.will.tell.(2016).pol.1cd.(6679586).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e07.time.will.tell.(2016).pol.1cd.(6684516).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e09.walcott.prep.(2016).pol.1cd.(6691919).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e09.walcott.prep.(2016).pol.1cd.(6694825).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wayward.pines.s02.e10.bedtime.story.(2016).pol.1cd.(6697630).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Wayward.Pines.Season.1.Complete.HDTV.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wetransfer-538bb5.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Wiedźmin 3 Dziki Gon [1].exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\Wiedźmin 3 Dziki Gon.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\Wiedźmin 3 Dziki Gon.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Windows10Upgrade28084.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\Windows10Upgrade28084.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Windows10Upgrade9252.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin\Downloads\Windows10Upgrade9252.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\winproductkey.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\witcher_3_wild_hunt_strumpet-wallpaper-1440x900.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Wpłata zaległości w Toyota Bank przed zamknięciem konta.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Wunderwaffe 1950.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\wushowhide.diagcab:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Yarn2.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\zamknijkonto_wypowiedzenie_toyota_bank.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\Złoty kompas [dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[kat.cr]game.of.thrones.s06e10.720p.hdtv.x264.avs.rartv.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.pl] Breaking Bad - Sezon 4 [720p WEB-DL H 264 AC3] [Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.pl] Jak zostać królem - The King's Speech -2010- [DVDRip.XviD-BiDA] [Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.to] CorelDRAW Graphics Suite X7 x86 x64 [PL][Keygen][Armaros-torrenty.org].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.to] Hobbit 2 - Pustkowie Smauga -2013-[DVDRip] [XviD] [Dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.to] Kabanos - Flaki z olejem (2010) [FLAC] [Z3K].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.to] Kabanos - Flaki z olejem (2010) [mp3 320].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\[torrenty.to] Złoty Kompas - The Golden Compass -2007- [DVDRip.XviD-miguel] [Dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\Downloads\_próbka_foto.JPG:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin\AppData\Local\Temp:JiNHqXBYNb9jrstsiC [2316] AlternateDataStreams: C:\Users\Marcin\AppData\Local\unins000.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\hardwestmarcin:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\PhSp_CS2_English.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Marcin_2\PhSp_CS2_English.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin_2\Desktop\12814768_1333793869971243_6812298170579045859_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\1933445_1049751628401088_3027902008540200061_o.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\1984.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\480P_600K_68023021.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\807 Network Joystick(4a12k)3.70a.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Desktop\albert-camus-dzuma.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\CAM01407.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\CAM01408.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\E. Hemingway - Stary czlowiek i morze_str8.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\Rozmieszczenie głównych wyłączników 23.02.2016.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\tumblr_n3l3tcdlgk1rzmgjno1_500.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\vcredist_x64.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Desktop\zajac.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Desktop\___Karta-Praw_ebook.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\081beac_360 (1).flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\081beac_360.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\11111111111.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\12923292_1066694750034540_358313774344906894_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\13094277_10209592199821305_8130046083313061990_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\15.201.1102.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\1f9fbcf_240.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\20. Było Sobie Życie - Mięśnie i tkanka tłuszczowa.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\20151109.POLiSH.eBook.PACK-Olbrzym.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\21. Było Sobie Życie - Wojna z toksynami.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\217a0a2.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\22222222222.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\225+-Cinema-4D-Resource.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\24. Było Sobie Życie - Łańcuch pokarmowy.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\25. Było Sobie Życie - Nocna Zmiana.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\26. Było Sobie Życie - Życie toczy się dalej.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\26c550a.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\41a364a_240.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\4584BE955D2224644629EBE16AC9210F0AC4E374.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\945256_840948976034320_1298593784159814393_n.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\a7b4332.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\AbetoCPort1522Lite64Multi.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ACU-ALI4.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Adibu Misja Ziemia 01 - Dlaczego niebo jest błękitne.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Agentka_Carter_-_Marvels_Agent_Carter_-_Sezon_1_[720p.WEB_DL.XviD.AC3-H3Q]_[Lektor_PL]_[Pawulon]].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\agusiq-torrents pl cinderella 2015 pldub-b89 agusiq.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Alias (1-28) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Alien Isolation Deluxe Edition DLC MULTi2 RePack-SEYTER-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\All Star Superman (1-12) GetComics.INFO (Update).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\All-New Wolverine 001 (2016) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\amd-catalyst-15.10beta-64bit-win10-win8.1-win7-oct12.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\amd-catalyst-15.10beta-64bit-win10-win8.1-win7-oct12.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\amnesia-a-machine-for-pigs-multi12pcdvdskidrowwwwgamestorrentsco..torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Appsdiagnostic10.diagcab:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ashampoo_burning_studio_free_1.14.5_sm (1).exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ashampoo_burning_studio_free_1.14.5_sm (1).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\assassin.s.creed_.rogue_.2015.repack.v2-skidrowcodex.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\assassins.creed_.unity_.gold_.edition.dz_.repack-skidrowcodex.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\b370cfc.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\bb82298acdb18717e76ed967c8ab999f.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\biling_2016-01-13_22_33_41 (1).csv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\biling_2016-01-13_22_33_41.csv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Borderlands.Game.Of.The.Year.Edition.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Butterfly 1.c4d:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Butterfly Wing.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Byla sobie ziemia 01 Straznicy ziemi.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Byla sobie ziemia 02 Klimat (1) - Na dalekiej polnocy.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Byla sobie ziemia 03 Woda w Indiach.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Byla sobie ziemia 04 Cenna woda Sahary.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Bylo sobie życie 22 Szczepienie.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\było sobie życie 2.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\c42bb98.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\card (1).png:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\card (2).png:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\card.png:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\CBurner-0-6-0-5346.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ChomikBox (1).msi:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ChomikBox.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\cialo.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\clipgrab-3.5.6.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\clipgrab-3.5.6.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Daken - Dark Wolverine (01 - 23) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Daredevil.-.Sezon.1.-.Lektor.PL.-.720p.WEBRip.XviD.AC3-H3Q.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\dark.souls_.prepare.to_.die_.edition.v1.0.2.0.2012-skidrowcodex.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Darkest.Dungeon.v13322.FitGirl.Repack (1).rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\DeadPool.PC.full.game.EN-RU.-font.color=#ccc-^^nosTEAM^^--font-.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Death of Wolverine (01 - 04) (2014) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\deity_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\deity_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Deus Ex Widescreen Utility 2.2.0.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Dragon Age ORIGINS AWAKENING PL ALL DLC.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Dragon Age Origins SKIDROW (1).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Dragon Age Origins SKIDROW.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\DropboxInstaller.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin_2\Downloads\e-Deklaracje-wtyczka (2).exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\e-Deklaracje-wtyczka (2).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ECSR Raport.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ela.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ever_After_High™_Bajka_Raven_Opowieść_Zbuntowanej_Dubbing_PL.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ever_After_High™_Królewska_praktyka_Apple_Dubbing_PL.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ever_After_High™_Raven_jest_wściekła_Dubbing_PL.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Fallout 2 [PL] (1).rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Fallout 2 [PL].rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\fallout-2-hi-res.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Fallout.4-CODEX.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\flashplayer21pp_fa_install.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\flashplayer21pp_fa_install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hamtaro - 01 Homtaro.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hamtaro - 03 Wszyscy na pomoc.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hamtaro - 04 Chodź do nas Bijou.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hard.West-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hearthstone-Setup (1).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hearthstone-Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hearthstone-Setup.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hitman Blood Money Torrent.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Horton słyszy Ktosia (2008) Dubbing PL.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Hotel Transylwania 2 Hotel Transylvania 2 _2015_ [MD] [HDRip] [XviD KiT] [Dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Imagine Dragons - I'm so Sorry instrumental.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Inhuman (001-014+Extras) (2014-2015) GetComics.INFO.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Karta-Praw_ebook.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Karta_Praw.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\karta_praw_18_03_16_44_strony.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\labirynt.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Legend.of.Grimrock.2.v2.2.4-DELiGHT.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\life is strange e1e2e3e4 pc game nosteam.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\life.is.strange.episode.4.only.ali213-skidrowcodex.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Life.Is.Strange.Episode.5-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\LIVE- 45 minutes of bitching about X-Men Apocalypse.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\lq129a819ced6d5be2b2eacfde47878a8b03992f9e3dc70c6ed6242b6a27bda895.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\lqc0e9b6331fd30a6f549c0a9808f59c33d6ed8f7ad2e18f534aee66b29e31cddd.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\LYNDA.COM+-+CINEMA+4D+R12+ESSENTIAL+TRAINING+%5Bthethingy%5D.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Lynda_-_Cinema_4D_R14_Essentials_[2012,_ENG].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Mark.of.the.Ninja.Special.Edition-SKIDROW-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\marvel s03e14.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\marvels ad s03e16.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\marvels s03e15.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Marvels+Jessica+Jones+Sezon+1+720p.WEBRip.XviD.AC3-KiT+Lektor+PL.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Max+Payne+3+Complete+Edition+v1.0.0.114+All+DLCs-REPACK.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Medycyna_estetyczna.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Metal Gear Rising Revengeance-RELOADED-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Metal.Gear.Solid.2.Substance - RELOADED.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Metal.Gear.Solid.5.The.Phantom.Pain.PC.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\metal.gear.solid.v.the.phantom.pain.full.unlocked-skidrowcodex.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Metal_Gear_Rising_Revengeance_RePack_R_G_Freedom.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Metro.2033.Redux-CODEX-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Monster High S01E01 - Posągowa sprawa.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Monster High S01E02 - Zjemwas Brothers.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\NDP46-KB3045560-Web.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\NDP46-KB3045560-Web.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\OPOWIE%26%23346%3BCI.Z.+NARNII.+Lew%2C+Czarownica+i+Stara+Szafa.DVDRip.DUP.PL.XviD.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Papers,.Please.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Policjanci-ostrzegaja-Nie-uzalezniaj-sie-od-komputera.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Recuva 1.52.1086 Professional.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\rh-fo2-1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\S.H.I.E.L.D. by Steranko - The Complete Collection-000.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\SetupImgBurn_2.5.8.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\SketchUpMake-en-x64.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\SketchUpMake-en-x64.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Skyfall+%282012%29+%5BBRRip%5D+%5BXViD-MORS%5D+%5BLektor+PL%5D.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Space.Hulk.MULTi7-PROPHET-[rarbg.com].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\SSD_v2.exe.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Star.Wars-.Knights.of.the.Old.Republic..GOG..torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Star.Wars.The.Force.Unleashed.2-RELOADED.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\starwars1.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\starwars2.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\starwars3.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Tajemnicze Złote Miasta 01. Esteban, Dziecko Słońca _xvid.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Tajemnicze Złote Miasta 02. Poprzez Atlantyk _xvid.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Tajemnicze Złote Miasta 03. Znowu bohaterowie _xvid.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The Walking Dead #003.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The Walking Dead #004.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The Walking Dead (001-153-Extras) (2003-) (Zone-Empire-Minutemen-Acan).part1.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The Walking Dead 001 (2003) (Digital) (Zone-Empire).cbr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The Walking Dead 002 (2003) (Digital) (Zone-Empire).cbr:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\the.walking.dead.sezon.1.dvdrip.xvid.lektor.pl.iso:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\The_Walking_Dead_Sezon_1_DVDRip_XviD_[Lektor_PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ThinInstaller_native.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Marcin_2\Downloads\ThinInstaller_native.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ulisses 31 - 01 - Zemsta Bogów.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ulisses 31 - 03 - Tajemnicza Kula.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ulisses 31 - 05 - Wieczna kara.divx:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Ulysses 31 02.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\unofficialFO2patch.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\V4 (1).rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\V4.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Walking Dead 01 - 05.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Walking Dead 06 - 10.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Walking Dead 11 - 15.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Warhammer40000_Final_Liberation.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\Willy Fog 2 - 20.000 mil podmorskiej żeglugi (1995) Dubbing PL.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\WOmvxbNAFYA4UtxY.htm:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\x360ce.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\x360ce_x64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\zamowienie_2698_1465328761.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\zus_jednostki.xls:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[FILEKING.PL]_Skyfall.2012.PL.BiDA_[Shogho].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[kat.cr]deus.ex.human.revolution.complete.edition.readnfo.prophet.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[kat.cr]the.walking.dead.the.game.episode.1.2.3.4.5.full.2012.repack.rip.by.audioslave (1).torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[kat.cr]the.walking.dead.the.game.episode.1.2.3.4.5.full.2012.repack.rip.by.audioslave.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[kickass.to]kane.and.lynch.dead.men.full.game.iso.tim225.1337x.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Adobe Photoshop CS6 v13 0 Extended Final x86 x64 [PL] [Crack][Armaros-torrenty org].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Avatar Legenda Korry - Księga II - Duchy [HDTV 720p] [Dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Chodząca śmierć - The Walking Dead - Sezon 2 [TVRip.XviD] [Lektor PL] [GODZILLATEAM].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] FRINGE - Na granicy światów - Sezon 1 [HDTV.XviD-LOL] [Lektor PL] [MARCEL73434].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Kopciuszek - Cinderella -2015- [BDRip] [XviD-KiT] [Dubbing PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Rayman Legends [PL] [RELOADED].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] The Walking Dead - Sezon 2 [DVBRip.XviD] [Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] The Walking Dead - Sezon 3 [HDTV.XviD] [Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] The Walking Dead - Sezon 4 [HDTV.XviD][Napisy PL][Pawulon].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Wiedźmin 3- Dziki Gon v1 08 + 15 DLC Pack + Polish Language Pack + Bonus Pack [Multi14] [ bin] [GOG].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Żywe trupy - The Walking Dead - Sezon 5 [HDTV.XviD] [Lektor PL] [karoll24-abdull71].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Żywe trupy - The Walking Dead [S06E01] [WEB-DL] [XviD-KiT] [Lektor PL].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\[torrenty.pl] Żywe trupy - The Walking Dead [Sezon 6] [Complete] [WEB-DL] [XviD-KiT] [Lektor PL] [AgusiQ].torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\_marvels s03e13.flv:$CmdZnID [26] AlternateDataStreams: C:\Users\Marcin_2\Downloads\___Karta-Praw_ebook.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Public\Desktop\YAIBA: Ninja Gaiden Z.lnk [546] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2015-07-10 12:04 - 2016-10-11 21:36 - 00001028 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-914296858-1329583620-193235316-1000\Control Panel\Desktop\\Wallpaper -> c:\users\marcin\downloads\download cats screensavers jeff november funny cat wallpaper 1440x900 ....jpg DNS Servers: 194.204.152.34 - 194.204.159.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja wyłączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: BstHdAndroidSvc => 3 MSCONFIG\Services: BstHdLogRotatorSvc => 2 MSCONFIG\Services: BstHdUpdaterSvc => 2 MSCONFIG\Services: DAUpdaterSvc => 3 MSCONFIG\Services: DbxSvc => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: IAStorDataMgrSvc => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: NvNetworkService => 2 MSCONFIG\Services: NvStreamNetworkSvc => 3 MSCONFIG\Services: NvStreamSvc => 2 MSCONFIG\Services: Origin Client Service => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: SplashtopRemoteService => 2 MSCONFIG\Services: Stereo Service => 2 MSCONFIG\Services: WTabletServiceCon => 2 MSCONFIG\Services: WTabletServicePro => 2 MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run: => "IAStorIcon" HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "ADSKAppManager" HKLM\...\StartupApproved\Run32: => "ADSK DLMSession" HKLM\...\StartupApproved\Run32: => "BambooCore" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKLM\...\StartupApproved\Run32: => "Dropbox" HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\StartupFolder: => "Dropbox.lnk" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "Dropbox Update" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "GalaxyClient" HKU\S-1-5-21-914296858-1329583620-193235316-1000\...\StartupApproved\Run: => "ALLUpdate" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808 FirewallRules: [UDP Query User{BE274FD4-8CA6-403A-BF7A-6DB481816990}H:\gry\bin\farcry3.exe] => H:\gry\bin\farcry3.exe FirewallRules: [TCP Query User{1D681D98-5F47-489C-BC40-F0DD0BC84A43}H:\gry\bin\farcry3.exe] => H:\gry\bin\farcry3.exe FirewallRules: [{B5B60C92-908F-4658-A9CB-1A48D14E6FA5}] => H:\Gry\bin\FC3Editor.exe FirewallRules: [{4E203FBF-B1A8-4218-A522-1E73DB4DA11F}] => H:\Gry\bin\FC3Editor.exe FirewallRules: [{E23908AE-8926-4B6D-8960-11AD20DDA0E3}] => H:\Gry\bin\FC3Updater.exe FirewallRules: [{57EE45C7-0E6D-4E39-AC99-A5AC9E7A4EDE}] => H:\Gry\bin\FC3Updater.exe FirewallRules: [{4A1AD7E9-3EFF-473A-8F75-AF5917048DAE}] => H:\Gry\bin\farcry3_d3d11.exe FirewallRules: [{7D66CEF6-0E8D-4A03-A78F-C9D7737FA93A}] => H:\Gry\bin\farcry3_d3d11.exe FirewallRules: [{372B766A-98AE-4A08-9A7D-58D6F597C163}] => H:\Gry\bin\farcry3.exe FirewallRules: [{D2428345-A7A5-4A3B-9118-80211BF06B01}] => H:\Gry\bin\farcry3.exe FirewallRules: [{9AC48D5E-A3FA-4CAD-A20E-C4B3C56A3C88}] => C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{AD8A403E-B5FD-429F-B2F6-76DFBF736BA0}] => C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{1B13A7BD-DD0E-4792-ACB0-8AA5C16F33D6}] => C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{95296F47-0890-4644-8D97-E3091F8BE4BE}] => C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [UDP Query User{11F0B8F7-4207-46EC-9CDA-C5C6DFE54DBA}C:\program files\java\jdk1.7.0_67\bin\jmc.exe] => C:\program files\java\jdk1.7.0_67\bin\jmc.exe FirewallRules: [TCP Query User{92E81BEF-9B9C-410E-AE8F-3E9A4DE2618D}C:\program files\java\jdk1.7.0_67\bin\jmc.exe] => C:\program files\java\jdk1.7.0_67\bin\jmc.exe FirewallRules: [{689C4788-7597-4C67-8576-FE440020726A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1DD83CF2-B092-4F45-A2A5-6149D41386F4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{50AC0975-5E2B-4739-9973-1788C33EDA49}] => LPort=1900 FirewallRules: [{E2B5DE8F-BD88-4584-904B-D3A685978D83}] => LPort=2869 FirewallRules: [{606C3C67-6173-4EA4-9A4D-8F472CD65219}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [UDP Query User{54703530-99B7-4486-B12A-ECDD90E5E170}C:\program files\java\jdk1.7.0_67\bin\java.exe] => C:\program files\java\jdk1.7.0_67\bin\java.exe FirewallRules: [TCP Query User{F0AA4C84-0716-4BBB-8C0F-8F95A213978D}C:\program files\java\jdk1.7.0_67\bin\java.exe] => C:\program files\java\jdk1.7.0_67\bin\java.exe FirewallRules: [{B918B374-4A1F-4071-BF19-64002C8165E6}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{ED1A9007-24D0-4145-B45D-B7FE0099409B}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{832E9A0E-1C57-4D46-9AAC-E20A16E51EB1}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{8732E633-B46B-417E-B26E-FCF0E3E0EB1F}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{CFF5F413-DD8E-4618-B86E-76D7D99640A9}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [UDP Query User{3B62E67D-0433-4AD1-ACDB-A95FFC9526DC}C:\program files (x86)\filezilla ftp client\filezilla.exe] => C:\program files (x86)\filezilla ftp client\filezilla.exe FirewallRules: [TCP Query User{1CCB2F58-7E82-4353-A799-9B9C0BBDAF92}C:\program files (x86)\filezilla ftp client\filezilla.exe] => C:\program files (x86)\filezilla ftp client\filezilla.exe FirewallRules: [UDP Query User{E576A501-875D-4DFD-80C9-1A3E56092E0A}C:\users\marcin_2\appdata\local\akamai\netsession_win.exe] => C:\users\marcin_2\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{6EB34807-8272-4705-9BDC-C593E1BDC619}C:\users\marcin_2\appdata\local\akamai\netsession_win.exe] => C:\users\marcin_2\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{E9897170-568E-4F7E-99CF-ABC335AFF090}C:\users\marcin_2\appdata\local\akamai\netsession_win.exe] => C:\users\marcin_2\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{89D57753-8531-4555-9E94-D68E5F3691E2}C:\users\marcin_2\appdata\local\akamai\netsession_win.exe] => C:\users\marcin_2\appdata\local\akamai\netsession_win.exe FirewallRules: [{69930CDF-FDC8-4C53-ABB5-8325BA6C3EE9}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{7FA84413-10D4-4F4E-9DD1-821B8B5FDE2F}] => C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [{E48D853B-424F-448D-A4F7-855039B8722E}] => C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [{DD25F746-9A0E-431A-AFAC-92FB55C36CB2}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{74A584F3-7FE7-42FE-9BCC-37948FDA6B53}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{022BDFFE-1559-41DA-8155-AE12273C77E4}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{35C0EF33-867C-4845-8686-BD81B6A759B9}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{798CB724-AC88-4E27-B970-32AB1F3B984D}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe FirewallRules: [{F79611AE-B7D3-4DA1-A2E4-998509ADD8D2}] => LPort=7935 FirewallRules: [{384A5304-0ACC-403E-A12B-929AABB7306D}] => H:\Gry\Dragon Age\bin_ship\daorigins.exe FirewallRules: [{30BA3698-7C05-450C-8401-DF9992B36958}] => H:\Gry\Dragon Age\bin_ship\daorigins.exe FirewallRules: [{526628FC-307C-46F6-BD5D-B876AB56F0C4}] => H:\Gry\Dragon Age\DAOriginsLauncher.exe FirewallRules: [{A058E9FD-48A2-4DDB-BE72-6EAB657009C6}] => H:\Gry\Dragon Age\DAOriginsLauncher.exe FirewallRules: [{D63FA7B5-9CFF-462C-81C4-4D0C7500CB1D}] => H:\Gry\Dragon Age\bin_ship\daupdatersvc.service.exe FirewallRules: [{E8D974A6-F6D7-4178-A6EE-7691164FE318}] => H:\Gry\Dragon Age\bin_ship\daupdatersvc.service.exe FirewallRules: [{40008D9D-2581-4C49-B852-BCCBB263B0E2}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{F7F1E710-9989-4C9D-9B19-32CA3E98BFFD}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{F229318D-0A98-4C24-954A-B1D7C8463C50}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{CB40D517-4EF4-4900-AED0-BB3604D20B44}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{6F0DDCE5-8CB5-46AD-AFD1-2256B15F3413}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{BB8B1F98-C679-44A1-BA24-7936422E5257}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{18DA98E4-95D5-44F7-A727-0E4FB76D4AA7}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{042D9EC7-6AE3-4CBB-BC1B-8F85D113026F}] => C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRServer.exe FirewallRules: [{48D207A3-C48C-4544-BC28-19875BB1EE2C}] => C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRFeature.exe FirewallRules: [{54262F98-8836-46AC-93D4-CA4CA2FD3BAB}] => C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\DataProxy.exe FirewallRules: [{7E009EA8-3E0E-498D-834F-79EEC491B82C}] => E:\Gry\Mass Effect II\Mass Effect 2\Binaries\MassEffect2.exe FirewallRules: [{8A7F6D83-FD48-4448-B10B-3A36BCA6DCD8}] => E:\Gry\Mass Effect II\Mass Effect 2\Binaries\MassEffect2.exe FirewallRules: [{B37412FA-B2F3-4DBA-B432-10C1C3B7F221}] => C:\Program Files (x86)\Opera\42.0.2393.517\opera.exe FirewallRules: [{39DEC2C7-30AD-4B15-885E-97AD9FA2297A}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{37FCB590-420D-4447-82F2-550C56561241}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{740B64F1-C51A-4B43-9BFE-A3465462D5FA}] => E:\Gry\Mass Effect 3\Binaries\Win32\MassEffect3.exe FirewallRules: [{EA55839C-D55C-4B74-AE35-6A2C4D23CF60}] => E:\Gry\Mass Effect 3\Binaries\Win32\MassEffect3.exe FirewallRules: [{7BD552BC-379C-4A44-A70B-0FDB5CDF552D}] => C:\Program Files (x86)\Opera\43.0.2442.806\opera.exe FirewallRules: [{FA663686-89ED-4CD5-B1CC-D9C4A3CA2713}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe FirewallRules: [{3D496F19-7A5D-42C7-ABD8-9F85548A7BAD}] => C:\Program Files (x86)\Steam\SteamApps\common\Cabals Card Blitz\CardBlitz.exe FirewallRules: [{33A0178C-9B38-4AE2-8CD8-47ECBF153372}] => C:\Program Files (x86)\Steam\SteamApps\common\Cabals Card Blitz\CardBlitz.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3 ==================== Punkty Przywracania systemu ========================= 11-02-2017 16:38:45 Zainstalowany program DirectX ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (02/11/2017 04:48:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: trine.exe, wersja: 1.0.0.1, sygnatura czasowa: 0x4d70d90e Nazwa modułu powodującego błąd: DINPUT8.dll, wersja: 10.0.10240.16384, sygnatura czasowa: 0x559f3af2 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00017d8e Identyfikator procesu powodującego błąd: 0x1e34 Godzina uruchomienia aplikacji powodującej błąd: 0x01d2847e24b8fd0a Ścieżka aplikacji powodującej błąd: E:\Games\Trine\trine.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\DINPUT8.dll Identyfikator raportu: ca808072-24e2-48eb-a212-48c7570eaa8e Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (02/11/2017 04:39:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error: (02/11/2017 03:41:34 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (02/11/2017 03:41:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (02/10/2017 02:21:39 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (02/09/2017 01:32:40 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (02/08/2017 11:25:38 PM) (Source: DbxSvc) (EventID: 320) (User: ) Description: Failed to connect to the driver: (-2147024894) Nie można odnaleźć określonego pliku. Error: (02/08/2017 11:25:37 PM) (Source: DbxSvc) (EventID: 270) (User: ) Description: Filter Unload failed with: (-2145452013) System nie może odnaleźć określonego filtru. Error: (02/08/2017 01:42:13 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (02/07/2017 02:43:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TWIERDZA) Description: Aktywacja aplikacji Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Dziennik System: ============= Error: (02/13/2017 01:29:18 AM) (Source: DCOM) (EventID: 10010) (User: TWIERDZA) Description: Serwer {260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (02/13/2017 01:29:18 AM) (Source: DCOM) (EventID: 10010) (User: TWIERDZA) Description: Serwer {260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (02/13/2017 01:29:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dostęp do danych użytkownika_Session57 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (02/13/2017 01:29:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Magazyn danych użytkownika_Session57 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (02/13/2017 01:29:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dane kontaktowe_Session57 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (02/13/2017 01:29:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Synchronizuj hosta_Session57 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (02/11/2017 02:08:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (02/11/2017 02:08:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Steam Client Service. Error: (02/11/2017 02:08:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (02/11/2017 02:08:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Steam Client Service. CodeIntegrity: =================================== Date: 2017-02-11 23:33:26.174 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 23:13:01.639 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 22:55:38.599 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 16:43:15.431 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 15:44:38.938 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 15:07:58.233 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 14:07:27.974 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 11:45:04.656 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-11 11:23:18.978 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-10 23:20:44.873 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\System32\guard64.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz Procent pamięci w użyciu: 32% Całkowita pamięć fizyczna: 8111.5 MB Dostępna pamięć fizyczna: 5440.66 MB Całkowita pamięć wirtualna: 16303.5 MB Dostępna pamięć wirtualna: 12876.82 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:303.12 GB) (Free:20.28 GB) NTFS Drive d: (xstary Systemowy) (Fixed) (Total:49.83 GB) (Free:1.71 GB) NTFS Drive e: (xstary Big_1) (Fixed) (Total:195.31 GB) (Free:20.18 GB) NTFS Drive f: (xstary Big_2) (Fixed) (Total:195.31 GB) (Free:1.42 GB) NTFS Drive g: (xstary Sieciowy) (Fixed) (Total:19.53 GB) (Free:1.25 GB) NTFS Drive h: (H) (Fixed) (Total:306.79 GB) (Free:20.96 GB) NTFS Drive i: (Grafika) (Fixed) (Total:321.5 GB) (Free:17.05 GB) NTFS Drive k: (ASR_RAM) (Fixed) (Total:0.12 GB) (Free:0.12 GB) FAT ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 75A7D0DC) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=303.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=306.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=321.5 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: 19821981) Partition 1: (Active) - (Size=49.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=415.9 GB) - (Type=OF Extended) ======================================================== Disk: 2 (Size: 128 MB) (Disk ID: 6A2E17E3) Partition 1: (Active) - (Size=128 MB) - (Type=06) ==================== Koniec Addition.txt ============================