Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x86) Wersja: 31-08-2016 Uruchomiony przez K (31-08-2016 17:13:17) Uruchomiony z C:\Users\K\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2016-01-15 18:45:44) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1282134373-2027245848-2267485883-500 - Administrator - Disabled) Gość (S-1-5-21-1282134373-2027245848-2267485883-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1282134373-2027245848-2267485883-1002 - Limited - Enabled) K (S-1-5-21-1282134373-2027245848-2267485883-1001 - Administrator - Enabled) => C:\Users\K ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Aktualizacje NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) Apple Mobile Device Support (HKLM\...\{15A0A9A6-6CF0-4EEE-8E12-096B33F92CA7}) (Version: 9.3.0.15 - Apple Inc.) Audacity 2.0.4 (HKLM\...\Audacity_is1) (Version: 2.0.4 - Audacity Team) Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.) calibre (HKLM\...\{DCB4A686-C75A-4F07-A5AE-00A4A618CE81}) (Version: 2.52.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP) Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON SX430 Series Printer Uninstall (HKLM\...\EPSON SX430 Series) (Version: - SEIKO EPSON Corporation) EPU-4 Engine (HKLM\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.02.01 - ) File Uploader (HKLM\...\{237CD223-1B9D-47E8-A76C-E478B83CCEA2}) (Version: 1.2.5 - Nikon) FileZilla Client 3.16.0 (HKLM\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse) FLAC Frontend (HKLM\...\{315E5E8B-0560-413A-B604-622A4C8BECBD}) (Version: 2.1.1 - Xiph.org) FormatFactory 3.9.0.0 (HKLM\...\FormatFactory) (Version: 3.9.0.0 - Free Time) Google Chrome (HKLM\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.) Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden Half-Life 2 (HKLM\...\Steam App 220) (Version: - Valve) HD Tune 2.55 (HKLM\...\HD Tune_is1) (Version: - EFD Software) HiSuite (HKLM\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd) HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC) HTC Driver Installer (HKLM\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation) IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.41 - Irfan Skiljan) iTunes (HKLM\...\{7C14EFF4-6BD4-4398-AF8D-41F40F8D71F1}) (Version: 12.4.1.6 - Apple Inc.) KinoniDrivers 2.8.1 (HKLM\...\KinoniDrivers) (Version: 2.8.1 - Kinoni) K-Lite Mega Codec Pack 12.1.0 (HKLM\...\KLiteCodecPack_is1) (Version: 12.1.0 - KLCP) LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - ) Malwarebytes Anti-Malware wersja 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 48.0.2 (x86 pl) (HKLM\...\Mozilla Firefox 48.0.2 (x86 pl)) (Version: 48.0.2 - Mozilla) Mozilla Thunderbird 45.2.0 (x86 pl) (HKLM\...\Mozilla Thunderbird 45.2.0 (x86 pl)) (Version: 45.2.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Nikon Message Center (HKLM\...\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}) (Version: 0.92.000 - Nikon) Nikon Transfer (HKLM\...\{E9757890-7EC5-46C8-99AB-B00F07B6525C}) (Version: 1.5.3 - Nikon) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) Panel sterowania NVIDIA 341.44 (Version: 341.44 - NVIDIA Corporation) Hidden PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.) PIXO RESCUE Version 1.0 (HKLM\...\PIXO RESCUE_is1) (Version: - TS COMPUTER GMBH) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Prince of Persia Sands of Time (HKLM\...\Uplay Install 111) (Version: - Ubisoft) S.T.A.L.K.E.R. - Shadow of Chernobyl (HKLM\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0000 - THQ) SDFormatter (HKLM\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association) SEGA Genesis & Mega Drive Classics (HKLM\...\Steam App 34270) (Version: - Sega) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Tom Clancy's Splinter Cell (HKLM\...\Uplay Install 109) (Version: - Ubisoft) TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) Ulead VideoStudio SE DVD (HKLM\...\{8F8D9297-FDD2-405A-97E7-E52C7B2F97B3}) (Version: 10.0 - Ulead Systems) UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.1.9.3 - uvnc bvba) Uplay (HKLM\...\Uplay) (Version: 20.0 - Ubisoft) Vegas Pro 11.0 (HKLM\...\{E6F012B0-E930-11E0-A67A-F04DA23A5C58}) (Version: 11.0.370 - Sony) VirtualDub Filter Pack 2014 version 1.3 (HKLM\...\{76869978-4F07-44DE-A15B-79EB7B094FA3}_is1) (Version: 1.3 - CodecPack.co) VSO ConvertXtoHD 2 (HKLM\...\{288A0B28-6655-4F0C-A4D3-24B5ED568EA9}_is1) (Version: 2.0.0.27 - VSO Software) WinRAR 5.31 beta 1 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.1 - win.rar GmbH) WinSCP 5.7.7 (HKLM\...\winscp3_is1) (Version: 5.7.7 - Martin Prikryl) WinX HD Video Converter Deluxe 5.5.3 (HKLM\...\WinX HD Video Converter Deluxe_is1) (Version: - Digiarty Software, Inc.) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0CF69577-7236-4C50-BDEF-FC842BD22548} - System32\Tasks\Driver Booster SkipUAC (K) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe Task: {13384FF6-9126-41DA-B45C-3612F8BCABAE} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {1727F53C-1294-4DA1-ACE8-38F83355F1F8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-02] (Google Inc.) Task: {1A4AF6A5-319C-4D5A-B7C0-94D693B32AF6} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe [2016-05-08] (ASUSTeK Computer Inc.) Task: {385826D8-A4CD-4F73-8D58-B19511C7EC95} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-02] (Google Inc.) Task: {3FCC117F-4466-449D-895C-A0D5A64804B2} - System32\Tasks\{5887EDCD-9604-316B-0AD3-192D43513E55} => C:\Users\K\AppData\Roaming\{D8EF37AB-58AE-3D86-DB61-E71583007555}\ytrbbvnvl.wwQ <==== UWAGA Task: {A66AEDEF-AEDD-4CD7-8EEF-4DCAB96C296C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd) Task: {AA437CBF-05F2-40F6-B2B6-449151F7519B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-08-30] (AVAST Software) Task: {F08B9177-4A77-41D5-96D5-66B9F71B802C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-07-13] (Adobe Systems Incorporated) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\Users\K\AppData\Local\Microsoft\Windows\GameExplorer\{687453D0-3411-45C3-A775-8A99EC402A2C}\SupportTasks\1\Pomoc techniczna.lnk -> hxxp://www.atarisupport.com/ Shortcut: C:\Users\K\AppData\Local\Microsoft\Windows\GameExplorer\{687453D0-3411-45C3-A775-8A99EC402A2C}\SupportTasks\0\Więcej gier od firmy Microsoft.lnk -> hxxp://www.unrealtournament.com/ ==================== Załadowane moduły (filtrowane) ============== 2016-01-15 21:34 - 2015-02-04 04:05 - 00106640 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2016-06-24 10:16 - 2016-05-25 12:53 - 00155336 _____ () C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe 2016-03-18 09:40 - 2016-03-18 09:40 - 00537088 _____ () C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\KinoniSvc.exe 2011-06-03 12:23 - 2011-06-03 12:23 - 00147456 _____ () C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\avutil-51.dll 2011-06-03 12:23 - 2011-06-03 12:23 - 03703808 _____ () C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\avcodec-53.dll 2011-06-03 12:23 - 2011-06-03 12:23 - 00224256 _____ () C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\swscale-0.dll 2013-10-17 16:27 - 2016-02-20 20:50 - 00166912 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe 2016-05-08 19:14 - 2016-05-08 19:14 - 00208896 _____ () C:\Program Files\ASUS\EPU-4 Engine\AiNap.dll 2016-05-08 19:14 - 2016-05-08 19:14 - 00008704 _____ () C:\Program Files\ASUS\EPU-4 Engine\vvc.dll 2016-05-08 19:14 - 2016-05-08 19:14 - 00565248 _____ () C:\Program Files\ASUS\EPU-4 Engine\pngio.dll 2016-05-08 19:14 - 2009-09-30 11:33 - 00024576 _____ () C:\Windows\system32\AsIo.dll 2016-05-08 19:14 - 2016-05-08 19:14 - 00053248 _____ () C:\Program Files\ASUS\EPU-4 Engine\AsSpindownTimeout.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2016-08-31 16:51 - 2016-08-31 16:51 - 03351566 _____ () C:\Users\K\AppData\Roaming\tor.exe ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\Stk1150.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\StkATVAp.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\amdpcom32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\asycfilt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ati2edxx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atibtmon.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\aticalcl.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\aticaldd.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\aticalrt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ATIDEMGX.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atidxx32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atimpc32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ATIODCLI.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ATIODE.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atioglxx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atipdlxx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atitmmxx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atiumdag.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atiumdva.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\cdd.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\centel.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d2d1.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3d10level9.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Dts2APO.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Dts2PropPageExt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEA32A.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEA32H.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EED32A.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EED32H.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEG32A.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\EEG32H.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEL32A.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEL32H.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEP32A.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EEP32H.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\esdevapp.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\E_DCINST.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\E_FD4BHAE.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\E_FLBHAE.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\fsquirt.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\fveapibase.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\FwRemoteSvr.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gpapi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\GPhotos.scr:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gpprefcl.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gpscript.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gpscript.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\gpsvc.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\inetpp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\inetppui.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\inseng.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\IPSECSVC.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDAZE.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDAZEL.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDBASH.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\kbdgeoqw.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDRU.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDRU1.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDTAT.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KBDYAK.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO30.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\MaxxAudioAPOShell.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MaxxAudioVnA.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\mfds.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msorcl32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mswsock.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\mtxoci.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netbtugc.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nQAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nQPropPageExt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ntkrnlpa.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ntprint.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ntprint.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nvcompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvcuda.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvcuvid.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvd3dum.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvdispco3234192.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvdispgenco3234192.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\NvFBC.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\NvIFR.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvoglv32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvopencl.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvvsvc.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\nvwgf2um.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Oemdspif.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ole32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\olepro32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\polstore.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\PropPageExt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\rpchttp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\rpcss.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\RtNicProp32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\RTNUninst32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\samlib.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\samsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\seclogon.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StkAProp.ax:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StkASSrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StkASv2K.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StkAVFW.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StkAWIA.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\StructuredQuery.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\tbs.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\usbaaplrc.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\vcamp140.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ViaKaraokeApo.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ViaKaraokePropPageExt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ViakaraokeSrv.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ViaMicArrayAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ViaMicArrayPropPageExt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VIAPropPageExt.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VIASysFx.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VMAPO232.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VMAPO32.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VMPPCN32.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VMPPLD32.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VMTHX32.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VMWRP32.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\VtSrdAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WavesGUILib.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01007.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winhttp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\winipsec.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WinUSBCoInstaller2.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wpnpinst.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\ws2_32.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\WSDScDrv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\amdide.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\ANDROIDUSB.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\ASACPI.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\AsInsHelp32.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\AsInsHelp64.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\bthenum.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\bthpan.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\bthport.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\BTHUSB.SYS:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\disk.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\dxgkrnl.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\dxgmms1.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\htcnprot.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\HtcVComV32.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\kinonivad.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\kinonivd.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\netbt.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\nvlddmkm.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\rfcomm.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\Rt86win7.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\srv.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\srv2.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\srvnet.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkACamd.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkAMini.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkAPin.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkAPipe.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkASam.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\StkScan.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\usbaapl.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\USBAUDIO.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\USBSTOR.SYS:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\usbvideo.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\viahduaa.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\VMfilt32.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\WSDPrint.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\WSDScan.sys:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Desktop\b3e1f2fa58c378-580-700-0-0-580-700.png:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\1455373345.2058.jpg:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\1455373345.2058.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\1455373348.1729.jpg:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\1455373348.1729.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\1455373354.8362.jpg:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\1455373354.8362.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\1455373358.3837.jpg:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\1455373358.3837.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160209.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160209.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160309(1).pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160309(1).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160309.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160509.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\19987512_E_Faktura_20160509.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\2015 04 01 - Wniosek o całkowitą spłate kredytu.docx:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\2015 04 01 - Wniosek o całkowitą spłate kredytu.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\20207985_E_Faktura_20160609.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\20207985_E_Faktura_20160609.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\341.96-desktop-win8-win7-winvista-32bit-international.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\341.96-desktop-win8-win7-winvista-32bit-international.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\7z1602-x64.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\7z1602-x64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\aAM_3.0.0_crk_3a(1).rar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\aAM_3.0.0_crk_3a(1).rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Andrzej Pilipiuk - Zagadka Kuby Rozpruwacza.epub:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Andrzej Pilipiuk - Zagadka Kuby Rozpruwacza.epub:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Aquapos_grafik_12.2015.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Aquapos_grafik_12.2015.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Artur Olender mplmi212 potwierdenie.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Artur Olender mplmi212 potwierdenie.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\AutoMapa.ver.3.0.2.(1037).build.3021037.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\AutoMapa.ver.3.0.2.(1037).build.3021037.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\backup_2016-02-04_18-43_duopospieszny.com-sql-nodrop.tar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\backup_2016-02-04_18-43_duopospieszny.com-sql-nodrop.tar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\bilet_23287030.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\bilet_23287030.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\bilet_23880729.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\bilet_23880729.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\bilet_23899802.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\bilet_23899802.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\bilet_24139853.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\bilet_24139853.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\bilet_27845009.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\bilet_27845009.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\calibre-2.52.0.msi:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\calibre-2.52.0.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\ChromeSetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\ChromeSetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\cispremium_installer.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\cispremium_installer.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\com_akeeba-4.6.1-core.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\com_akeeba-4.6.1-core.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\document(1).pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\document(1).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\document.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\driver_booster_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\driver_booster_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\DSC_0198.JPG:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\DSC_0198.JPG:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\DSC_6795.jpg:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\DSC_6795.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\DxO_OpticsPro9_Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\DxO_OpticsPro9_Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Edigey Jerzy - Strzal na dansingu.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\etykieta_2016-05-22_21-18-44.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\etykieta_2016-05-22_21-18-44.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\fastboot-linux.zip:$CmdTcID [130] AlternateDataStreams: C:\Users\K\Downloads\fastboot-linux.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\fastboot-win.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\fastboot-win.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\FFSetup3.9.0.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\FFSetup3.9.0.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\FileZilla_3.16.0_win32-setup_bundled.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\FileZilla_3.16.0_win32-setup_bundled.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\FileZilla_3.17.0_win32-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\filozofiasmaku.blogspot.com-Kruche babeczki z kremem z mascarpone i czekolady.pdf:$CmdTcID [130] AlternateDataStreams: C:\Users\K\Downloads\filozofiasmaku.blogspot.com-Kruche babeczki z kremem z mascarpone i czekolady.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Firefox Setup 48.0.2.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Firefox Setup 48.0.2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Firefox Setup Stub 46.0.1.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Firefox Setup Stub 48.0.2.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Firefox Setup Stub 48.0.2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Firmware restore.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Firmware restore.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\FLAC frontend v2.1.msi:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\FLAC frontend v2.1.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Frederick Forsyth Dzień Szakala audiobook lektor PL.part1.rar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Frederick Forsyth Dzień Szakala audiobook lektor PL.part1.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Frontiers in Pharmacology.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Frontiers in Pharmacology.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\gapps-jb-20130812-signed.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\gapps-jb-20130812-signed.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\GeForce6100SM-M_V1.1.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\GeForce6100SM-M_V1.1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\gmd_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\gmd_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\GoogleNow.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\GoogleNow.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Hisuite_4.0.5.300.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Huawei-P9-sample-SW.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\installer_r24.4.1-windows.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\installer_r24.4.1-windows.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\IP Webcam.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\IP Webcam.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\ipko_potw_500plus_20160401_233242.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\ipko_potw_500plus_20160401_233242.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\iTunesSetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\iTunesSetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\jackpal.androidterm-1.0.70-71-minAPI4.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\jackpal.androidterm-1.0.70-71-minAPI4.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 1.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 1.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 2.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 2.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 3.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\James Dashner - Więzień Labiryntu 3.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\jdk-8u73-windows-i586.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\jdk-8u73-windows-i586.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Joomla_3.4.8-Stable-Update_Package.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Joomla_3.4.8-Stable-Update_Package.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\K-Lite_Codec_Pack_1210_Mega.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\K-Lite_Codec_Pack_1210_Mega.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\K-Lite_Codec_Pack_1230_Full.exe.part:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\kalulator_kredyty - Kopia.xlsm:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\kalulator_kredyty - Kopia.xlsm:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\kalulator_kredyty.xlsm:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\kalulator_kredyty.xlsm:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\KinoniWinInstaller281.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\KinoniWinInstaller281.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Klucze Do Wszystkich Wersji Microsoft Office.txt:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Klucze Do Wszystkich Wersji Microsoft Office.txt:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Komunikat Dzien Dziecka.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Kontakty iPhone.vcf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Kontakty iPhone.vcf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Latarnik - Henryk Sienkiewicz.epub:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Latarnik - Henryk Sienkiewicz.epub:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Lewis Clive Staples - Listy Starego Diabła Do Młodego.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Lewis Clive Staples - Listy Starego Diabła Do Młodego.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\LibreOffice_5.1.4_Win_x64.msi:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\LibreOffice_5.1.4_Win_x64.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\LinuxLive USB Creator 2.9.4.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\LinuxLive USB Creator 2.9.4.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\LinuxLive-USB-Creator-2.8.19.rar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\LinuxLive-USB-Creator-2.8.19.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\LiveSuitPack_version_1.09.rar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\LiveSuitPack_version_1.09.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\mail na ostatnią stronę.docx:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\mail na ostatnią stronę.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Malowanie portretów.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Malowanie portretów.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\mbam-setup-2.2.1.1043.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\mbam-setup-2.2.1.1043.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\MID04-MANUAL.pdf:$CmdTcID [130] AlternateDataStreams: C:\Users\K\Downloads\MID04-MANUAL.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Moje wielkie greckie wesele 2.avi:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Moje wielkie greckie wesele 2.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Moje Wielkie Greckie Wesele.avi:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Moje Wielkie Greckie Wesele.avi:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\molecules-19-02911.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\molecules-19-02911.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Msza święta 16.04.16.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Msza święta 16.04.16.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\mtsmerger_1_0_0_2.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\mtsmerger_1_0_0_2.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\najważniejsze daty.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\najważniejsze daty.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Notepad2_4.2.25_PL_32-bit.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Ostateczna lista Szafarzy.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\PG7610000_Marvel_hboot_1.08.0099_20111216.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\K\Downloads\PG7610000_Marvel_hboot_1.08.0099_20111216.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\picasa39-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\picasa39-setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\pity2015ngsetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\pity2015ngsetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\plan_ucznia_17.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\pocketrxtx_v0.9.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\pocketrxtx_v0.9.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Podręczniki-klasa-III-gimnazjum.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Podręczniki-klasa-III-gimnazjum.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Potwierdzenie transakcji.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\PRemoteDroid-Server.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\PRemoteDroid-Server.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\przewodnik_1949.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\przewodnik_1949.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Qualify.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Qualify.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\RemoteLinkSetup.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\RemoteLinkSetup.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\root.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\root.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\S.T.A.L.K.E.R. Cień Czarnobyla Crack v 1.0006 Multi.7z:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\S.T.A.L.K.E.R. Cień Czarnobyla Crack v 1.0006 Multi.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\setup_3.3.63.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\setup_3.3.63.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\setup_the_plan.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\setup_the_plan.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160213-140157.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160213-140157.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160309-192044.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160309-192044.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160312-142221.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-duopospieszny.com-20160312-142221.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160213-145344.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160213-145344.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160309-202651.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160309-202651.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-120506.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-120506.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-130844.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-130844.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-150244.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-easyprofits.pl-20160312-150244.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160213-145852.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160213-145852.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160309-203109.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160309-203109.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160312-151340.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-pm.easyprofits.pl-20160312-151340.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-www.chorg.ump.edu.pl-20160319-184530.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-www.chorg.ump.edu.pl-20160319-184530.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\site-www.chorg.ump.edu.pl-20160613-165321.jpa:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\site-www.chorg.ump.edu.pl-20160613-165321.jpa:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Sklep Play 5.0.31.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Sklep Play 5.0.31.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\SnapChat 9.14.0.0.apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\SnapChat 9.14.0.0.apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Snapchat v8.0.0 (446).apk:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Snapchat v8.0.0 (446).apk:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Sony Vegas Pro 11.0.370 32bit.rar:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Sony Vegas Pro 11.0.370 32bit.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\SteamSetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\SteamSetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\stk-multi-patch.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\stk-multi-patch.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Szmagier Krzysztof - 07 zgłoś się - 14. Hieny.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Szmagier Krzysztof - 07 zgłoś się - 14. Hieny.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Ted Dabney Interview 102746459-05-01-acc.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Ted Dabney Interview 102746459-05-01-acc.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\torbrowser-install-5.5.2_pl.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\torbrowser-install-5.5.2_pl.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\tsMuxeR_2.6.12.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\UplayInstaller.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\UplayInstaller.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\urserver-3.4.0.474(1).deb:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\urserver-3.4.0.474(1).deb:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\urserver-3.4.0.474.deb:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\urserver-3.4.0.474.deb:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\vc_redist.x86.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\vc_redist.x86.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\VirtualdubFFMpegPlugin_1843_X86_X64.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\VirtualdubFFMpegPlugin_1843_X86_X64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\vi_0003_20160605_090306.mp4:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\vi_0003_20160605_090306.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\vi_0045_20160609_223928.mp4:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\vi_0045_20160609_223928.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\vsoConvertXtoHD2_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\vsoConvertXtoHD2_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\W303CNmanual.doc:$CmdTcID [130] AlternateDataStreams: C:\Users\K\Downloads\W303CNmanual.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\WF_X1e_User_Manual_English.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\WF_X1e_User_Manual_English.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\wielokąty foremne powtórka(1).pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\wielokąty foremne powtórka(1).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\winscp577setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\winscp577setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\winx-hd-converter-deluxe.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\winx-hd-converter-deluxe.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Wniosek PJ_3.0 + druk_2.0 PKO opl. 100,50 zl - Kopia.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\wniosek_500plus_PKO000000038466.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\wniosek_500plus_PKO000000038466.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\wsx5_home_dobreprogramyhm12de.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\wsx5_home_dobreprogramyhm12de.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\wyniki egz.S 6.6. II farmacja 15-16 .docx:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\wyniki egz.S 6.6. II farmacja 15-16 .docx:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\wzór_umowy_przedwstępnej_sprzedaży_mieszkania_obciążonego_hipoteką.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\wzór_umowy_przedwstępnej_sprzedaży_mieszkania_obciążonego_hipoteką.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\ZK30101ENmanual.doc:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\ZK30101ENmanual.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\K\Downloads\Łazy Ania - Kopia.zip:$CmdTcID [64] AlternateDataStreams: C:\Users\K\Downloads\Łazy Ania - Kopia.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\K\AppData\Roaming\inst.exe:$CmdTcID [64] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) IE trusted site: HKU\S-1-5-21-1282134373-2027245848-2267485883-1001\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-1282134373-2027245848-2267485883-1001\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1282134373-2027245848-2267485883-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\K\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja wyłączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files\BlueStacks\HD-Agent.exe MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR MSCONFIG\startupreg: iTunesHelper => "D:\ITunes\iTunesHelper.exe" MSCONFIG\startupreg: Nikon Transfer Monitor => C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe MSCONFIG\startupreg: NvBackend => "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe" MSCONFIG\startupreg: Steam => "D:\Steam\steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: UVS10 Preload => C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe MSCONFIG\startupreg: {5887EDCD-9604-316B-0AD3-192D43513E55} => C:\Users\K\AppData\Roaming\{D8EF37AB-58AE-3D86-DB61-E71583007555}\ytrbbvnvl.wwQBRrTlm ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{E19A533B-E465-43EC-9F6A-49A4C211B648}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{90B72448-9133-4939-A8C0-EB5C9AE4915F}] => (Allow) LPort=5900 FirewallRules: [{23B5A3D8-3019-40F2-BE45-CBC23113747B}] => (Allow) LPort=5800 FirewallRules: [{F7E6C43C-AF1F-46FA-9E94-54EAC3DDE9F2}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe FirewallRules: [{630CC574-932C-423D-9EB7-F481B23D1CEB}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe FirewallRules: [{695ACEF2-A7B3-4AC8-B741-882375ACFBAE}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe FirewallRules: [{77368D77-CADA-461E-AEF7-9BF72CC6EC7E}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe FirewallRules: [{9B1544E4-62BA-4129-B688-CB74EB49114D}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{BD3186AB-7BEB-41F1-84F5-2B925A8AF63C}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{E26A7D92-473A-4710-B72D-9034D7E19F4F}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{0A35AF03-83AB-41D0-8D94-FEEFC0F30964}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{6044283F-691E-4B0A-A159-E4DF912C476D}] => (Allow) D:\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe FirewallRules: [{C595FCE1-3D81-4925-B52F-742EF48BA5CB}] => (Allow) D:\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe FirewallRules: [{8C537EA2-B0F4-4865-BA9D-5EACE264A25F}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe FirewallRules: [{DF19F0CB-99BD-4D4F-96E0-9D0EBDB3C250}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe FirewallRules: [{7E8037D8-3908-4488-BFF5-782AF507DEFE}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe FirewallRules: [{F243EF00-06C2-4A65-A79F-514EC9AE919E}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe FirewallRules: [{CB928B23-B08A-471B-8DAF-980AE0715B14}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe FirewallRules: [{87A083D6-19C1-4F2E-9974-60F39D37E20F}] => (Allow) C:\Program Files\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe FirewallRules: [{94EBF9AE-273E-481C-8057-B58F6F6D07B6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{C724EC21-89FD-4158-B12B-2C84DC569559}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{572769F9-2B27-4035-BBD4-90D8A8CCDD78}] => (Allow) D:\ITunes\iTunes.exe FirewallRules: [{E78EF023-5A92-41FE-BD1A-B87BD8B534DE}] => (Allow) D:\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe FirewallRules: [{DFA75E39-9A01-4CAA-B567-627E9957A2C7}] => (Allow) D:\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe FirewallRules: [{9F1FF011-6343-48FF-AFBA-EFF5BE904E4D}] => (Allow) D:\Gry\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe FirewallRules: [{A5C98899-7793-47C3-B7C5-FE6C9248D7CB}] => (Allow) D:\Gry\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe FirewallRules: [{82DAFF5C-AC21-43A2-8A9D-FAB69F592EF5}] => (Allow) D:\Gry\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe FirewallRules: [{99EB7025-6278-430F-B834-D0AD14893346}] => (Allow) D:\Gry\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe FirewallRules: [{DEA9A91E-D50D-47A8-B102-8FD34059FAA5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe FirewallRules: [{1D2FEB26-80CB-4B95-ADD2-7378D4064B0B}] => (Allow) C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\KinoniSvc.exe FirewallRules: [{4F6ABAC3-8277-409F-BE79-2D049FE6B22F}] => (Allow) C:\Program Files\Kinoni\EpocCam_and_Barcode_drivers\KinoniSvc.exe FirewallRules: [{596097C7-693D-46BC-A289-6008EA8E2D17}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{DD5C7A0B-4A96-4AC5-B2D4-0D3697BEA592}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Punkty Przywracania systemu ========================= 18-08-2016 13:53:29 Windows Update 22-08-2016 15:00:05 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 29-08-2016 17:34:07 Zaplanowany punkt kontrolny 30-08-2016 23:43:04 Removed Apple Application Support (32-bit) 30-08-2016 23:43:31 Removed Apple Software Update 30-08-2016 23:44:12 Removed Java 8 Update 91 30-08-2016 23:44:40 Removed Java SE Development Kit 8 Update 73 ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (08/31/2016 04:48:56 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Client application bug: DNSServiceResolve(mobile._epoccam._tcp.local.) active for over two minutes. This places considerable burden on the network. Error: (08/31/2016 04:44:40 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Client application bug: DNSServiceResolve(mobile._epoccam._tcp.local.) active for over two minutes. This places considerable burden on the network. Error: (08/31/2016 04:17:54 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Client application bug: DNSServiceResolve(mobile._epoccam._tcp.local.) active for over two minutes. This places considerable burden on the network. Error: (08/31/2016 12:20:00 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Client application bug: DNSServiceResolve(mobile._epoccam._tcp.local.) active for over two minutes. This places considerable burden on the network. Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Nie można zainicjować indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Nie można zainicjować aplikacji. Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Nie można zainicjować obiektu programu zbierającego. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć elementu. (HRESULT : 0x80070490) (0x80070490) Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Nie można zainicjować dodatku typu plug-in w . Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (08/31/2016 12:18:00 AM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Usługa Windows Search nie może załadować informacji z magazynu właściwości. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Dziennik System: ============= Error: (08/31/2016 04:46:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Apple Mobile Device z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (08/31/2016 04:46:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Apple Mobile Device. Error: (08/31/2016 04:42:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Apple Mobile Device z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (08/31/2016 04:42:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Apple Mobile Device. Error: (08/31/2016 04:15:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Apple Mobile Device z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (08/31/2016 04:15:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Apple Mobile Device. Error: (08/31/2016 12:18:30 AM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom usługę ponownie) po nieoczekiwanym zakończeniu usługi Windows Search, ale ta akcja nie powiodła się przy następującym błędzie: Jedno wystąpienie usługi już działa. . Error: (08/31/2016 12:18:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (08/31/2016 12:18:00 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-1073473535. Error: (08/31/2016 12:17:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Apple Mobile Device z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. CodeIntegrity: =================================== Date: 2016-07-07 17:41:04.390 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-07-07 17:41:04.279 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-07-02 19:29:33.334 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-07-02 19:29:33.268 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-26 23:06:47.326 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-26 23:06:47.273 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\VIASysFx.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-24 20:54:22.034 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm because the set of per-page image hashes could not be found on the system. Date: 2016-06-24 20:54:21.977 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGACM.acm because the set of per-page image hashes could not be found on the system. Date: 2016-06-24 20:54:21.924 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\PROGRA~1\COMMON~1\ULEADS~1\VIO\DVACM.acm because the set of per-page image hashes could not be found on the system. Date: 2016-06-24 20:54:21.872 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codecp.acm because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: AMD Phenom(tm) II X2 555 Processor Procent pamięci w użyciu: 35% Całkowita pamięć fizyczna: 3198.18 MB Dostępna pamięć fizyczna: 2061.2 MB Całkowita pamięć wirtualna: 6394.68 MB Dostępna pamięć wirtualna: 4972.98 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:117.28 GB) (Free:67.15 GB) NTFS Drive d: (Dane) (Fixed) (Total:831.5 GB) (Free:95.01 GB) NTFS Drive h: (Samsung-backup) (Fixed) (Total:931.51 GB) (Free:229.6 GB) NTFS Drive x: (filmy) (Network) (Total:906.93 GB) (Free:397.45 GB) NTFS Drive y: (dok) (Network) (Total:9.72 GB) (Free:8.87 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 117.4 GB) (Disk ID: 5259E623) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=117.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F373DEF7) Partition 1: (Not Active) - (Size=837.5 GB) - (Type=OF Extended) Partition 2: (Not Active) - (Size=94 GB) - (Type=83) ======================================================== Disk: 3 (Size: 931.5 GB) (Disk ID: 514A026C) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================