API tools faq
paste
Guest User

Addition.txt

a guest
Aug 6th, 2016
143
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 144.95 KB | None | 0 0
raw download clone embed print report
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-08-2016
  2. Ran by T-BAG (2016-08-06 20:39:47)
  3. Running from C:\Users\T-BAG\Downloads
  4. Windows 7 Home Premium Service Pack 1 (X64) (2014-05-15 04:04:38)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-452096055-1060168818-2339660257-500 - Administrator - Disabled)
  12. Guest (S-1-5-21-452096055-1060168818-2339660257-501 - Limited - Disabled) => C:\Users\Guest
  13. T-BAG (S-1-5-21-452096055-1060168818-2339660257-1000 - Administrator - Enabled) => C:\Users\T-BAG
  14. theodore bagwell (S-1-5-21-452096055-1060168818-2339660257-1002 - Limited - Enabled) => C:\Users\theodore bagwell
  15.  
  16. ==================== Security Center ========================
  17.  
  18. (If an entry is included in the fixlist, it will be removed.)
  19.  
  20. AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  21. AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
  22. AS: Comodo Defense+ (Disabled - Up to date) {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}
  23. FW: COMODO Firewall (Enabled) {C8870897-C358-086B-2944-184866CC6D0A}
  24.  
  25. ==================== Installed Programs ======================
  26.  
  27. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  28.  
  29. Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
  30. Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
  31. AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.56 - ASUSTeK Computer Inc.)
  32. Akamai NetSession Interface (HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
  33. Akamai NetSession Interface (HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Akamai) (Version: - Akamai Technologies, Inc)
  34. Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
  35. Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)
  36. Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
  37. ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
  38. CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
  39. COMODO Firewall (HKLM\...\{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}) (Version: 7.0.55655.4142 - COMODO Security Solutions Inc.)
  40. Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
  41. Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
  42. CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
  43. D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
  44. DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
  45. Dota 2 (HKLM\...\Steam App 570) (Version: - Valve)
  46. Dying Light (HKLM\...\Steam App 239140) (Version: - Techland)
  47. EVGA PrecisionX 16 (HKLM-x32\...\{2183FCC1-07DA-44D5-97FB-EEC4EBA57D7B}) (Version: 5.3.1 - EVGA Corporation)
  48. Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
  49. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
  50. Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
  51. Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
  52. Grand Theft Auto IV (x32 Version: 1.0.0011.131 - Rockstar Games Inc.) Hidden
  53. HP Deskjet 2540 series Basic Device Software (HKLM\...\{6A79CD11-0C1C-4E24-A8C6-46A02F680346}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
  54. Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
  55. Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
  56. Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
  57. iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)
  58. LenovoUsbDriver 1.0.9 (HKLM-x32\...\LenovoUsbDriver) (Version: 1.0.9 - Lenovo)
  59. Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
  60. Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
  61. Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
  62. Microsoft Build Tools 2015 (HKLM-x32\...\{d21da0dd-4ba4-4838-ba58-64cf7a77131a}) (Version: 14.0.23107.10 - Microsoft Corporation)
  63. Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
  64. Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
  65. Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
  66. Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
  67. Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
  68. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
  69. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
  70. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
  71. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
  72. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
  73. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
  74. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
  75. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  76. Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
  77. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  78. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
  79. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  80. Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  81. Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  82. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  83. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  84. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
  85. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
  86. Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
  87. Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
  88. Microsoft Word 2010 (HKLM\...\Office14.WORD) (Version: 14.0.7015.1000 - Microsoft Corporation)
  89. MiniTool Power Data Recovery Free Edition 7.0 (HKLM\...\MiniTool Power Data Recovery Free Edition_is1) (Version: - MiniTool Solution Ltd.)
  90. MotioninJoy Gamepad tool 0.7.0000 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.0000 - www.motioninjoy.com)
  91. Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
  92. Mozilla Firefox 47.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 en-GB)) (Version: 47.0.1 - Mozilla)
  93. Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.1.6018 - Mozilla)
  94. NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
  95. NVIDIA 3D Vision Driver 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 364.51 - NVIDIA Corporation)
  96. NVIDIA 3D Vision Video Player (HKLM-x32\...\{7BF8BD5F-EE1A-4DB1-B810-A4AE1D34530E}) (Version: 1.7.2 - NVIDIA Corporation)
  97. NVIDIA GeForce Experience 2.11.2.55 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.55 - NVIDIA Corporation)
  98. NVIDIA Graphics Driver 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.51 - NVIDIA Corporation)
  99. NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
  100. NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
  101. Opera Stable 39.0.2256.48 (HKLM-x32\...\Opera 39.0.2256.48) (Version: 39.0.2256.48 - Opera Software)
  102. Perfect Uninstaller v6.3.4.0 (HKLM\...\Perfect Uninstaller_is1) (Version: - www.PerfectUninstaller.com)
  103. qBittorrent 3.3.5 (HKLM-x32\...\qBittorrent) (Version: 3.3.5 - The qBittorrent project)
  104. Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.19.23944 - Razer Inc.)
  105. Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
  106. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
  107. Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
  108. Sandboxie 4.16 (64-bit) (HKLM\...\Sandboxie) (Version: 4.16 - Sandboxie Holdings, LLC)
  109. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0000-1000-0000000FF1CE}_Office14.WORD_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
  110. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
  111. SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
  112. SHIELD Wireless Controller Driver (Version: 2.11.2.55 - NVIDIA Corporation) Hidden
  113. Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
  114. Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.109 - Skype Technologies S.A.)
  115. SMAC 2.0 (HKLM-x32\...\SMAC 2.0) (Version: - )
  116. Smartflix (HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\smartflix) (Version: 1.3.1 - Smartflix)
  117. Smartflix (HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\smartflix) (Version: 1.3.1 - Smartflix)
  118. SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
  119. Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
  120. Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
  121. Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve)
  122. TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
  123. The Official DVSA Theory Test for Car Drivers (HKLM-x32\...\{E9DF3ECB-00F3-4992-955D-ABC9AAD23BFA}) (Version: 1.00.0000 - TSO)
  124. Transmission-Qt (HKLM\...\Transmission-Qt) (Version: 2.84.4 - Transmission)
  125. VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
  126. Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
  127. Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
  128. WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
  129. Wireshark 1.12.2 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.2 - The Wireshark developer community, hxxp://www.wireshark.org)
  130. WTFast 3.5 (HKLM-x32\...\{12B4121D-5221-4AFC-9EDC-63B0CA139856}_is1) (Version: 3.5.9.511 - Initex & AAA Internet Publishing)
  131. Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
  132.  
  133. ==================== Custom CLSID (Whitelisted): ==========================
  134.  
  135. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  136.  
  137.  
  138. ==================== Scheduled Tasks (Whitelisted) =============
  139.  
  140. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  141.  
  142. Task: {01F38556-02DD-41F2-9A6B-14ACD6D48FA3} - System32\Tasks\Run LSI => C:\Program Files (x86)\LSI\LoLSummonerInfo.exe
  143. Task: {11B771FE-94B3-4E75-9B08-E98736CFDF73} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
  144. Task: {16EB17AF-4346-4ABB-840E-EB514C781B7A} - System32\Tasks\{0C108B8C-FA4E-4F68-B626-D4805E6BCFEF} => Firefox.exe hxxp://ui.skype.com/ui/0/7.18.85.111/en/abandoninstall?page=tsProgressBar
  145. Task: {1B9F8128-7ECB-4EF1-97C3-1CE961F65336} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2015-07-12] ()
  146. Task: {26333617-A147-492A-892F-840B61C9EA9B} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2015-07-12] (ASUSTeK Computer Inc.)
  147. Task: {29B45394-910F-4C92-9443-0A1B07886CEA} - System32\Tasks\ASUS\ASUS WiFi GO! Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\AssistTools\WiFi GO! Server.exe [2015-07-12] (ASUSTeK Computer Inc.)
  148. Task: {3305219C-5844-4C5A-892C-741E660079C4} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
  149. Task: {537FF01F-075E-401D-89ED-BF6A490BC48F} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2015-07-12] ()
  150. Task: {767F3CB7-6A34-4B83-BACB-2A5EA871AF91} - System32\Tasks\{40670C3B-1AD8-413C-BD87-1089B8E827AC} => Firefox.exe hxxp://ui.skype.com/ui/0/7.6.0.105/en/abandoninstall?source=lightinstaller&page=tsProgressBar
  151. Task: {801F3D7B-2609-431B-A338-1B7479D15CD0} - System32\Tasks\{BAE2BBD2-FC15-4385-8808-0855E2582904} => pcalua.exe -a "C:\Program Files (x86)\KLC\SMAC\UNWISE.EXE" -c C:\Program Files (x86)\KLC\SMAC\INSTALL.LOG
  152. Task: {806304F3-CCB0-4DC2-9623-097E6E1E35DF} - System32\Tasks\{900A653E-8A5F-4E04-B22B-C153CD3B1BFF} => pcalua.exe -a C:\Users\T-BAG\Downloads\ArticGunZ_Installer_23052014(1).exe
  153. Task: {8C0D2B97-B263-4904-B57E-ADCCD4544055} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-06] (Google Inc.)
  154. Task: {93E72B40-A7F2-4B44-A5A9-90304B2E6213} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
  155. Task: {A970EA92-E14D-419F-914C-22E7D606E56A} - System32\Tasks\{D075FA6B-62CC-4670-9858-329EDB7EEFE8} => pcalua.exe -a C:\Users\T-BAG\AppData\Roaming\DesktopIconForAmazon\desktopicon-chip-amazon.exe -c uninstall
  156. Task: {BE7912D2-EA7F-49A8-9867-71C520E29C7B} - System32\Tasks\Opera scheduled Autoupdate 1467742256 => C:\Program Files (x86)\Opera\launcher.exe [2016-08-05] (Opera Software)
  157. Task: {BF29A337-674B-44CB-8652-A51FC9874823} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-30] (Piriform Ltd)
  158. Task: {CBE2D75B-2171-40C7-B2F2-048AC65C2669} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2015-07-12] (ASUSTeK Computer Inc.)
  159. Task: {D9E7F23B-B0EC-454B-9723-855C37156F09} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-07-29] (Adobe Systems Incorporated)
  160. Task: {E26CA3EA-BD61-4B84-9ADB-876ECA16FCEC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
  161. Task: {E448BF00-FAB0-4861-A4BA-98C2AAF85D6D} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-02-04] (COMODO)
  162. Task: {E55F2CE2-7E33-4018-A44B-B7730CEF6810} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-06] (Adobe Systems Incorporated)
  163. Task: {EDFF6B4C-D1E1-4563-85A7-415ACC915690} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite III\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2015-07-12] (ASUSTeK Computer Inc.)
  164. Task: {F6CBE30A-CCF2-4A54-A72D-1E0D9D9DD3F4} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-02-04] (COMODO)
  165. Task: {F9749A82-793A-4FFF-A2AB-DC053A43F68C} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-02-04] (COMODO)
  166. Task: {FF305FA9-CABC-4407-B092-9361DE1ED1D4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-06] (Google Inc.)
  167.  
  168. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  169.  
  170. Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  171. Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  172. Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  173.  
  174. ==================== Shortcuts =============================
  175.  
  176. (The entries could be listed to be restored or removed.)
  177.  
  178. Shortcut: C:\Users\T-BAG\AppData\Local\Microsoft\Windows\GameExplorer\{385AE3CE-F9B1-44A3-BF19-4410196C846E}\SupportTasks\1\Support.lnk -> hxxp://techsupport.ea.com/
  179. Shortcut: C:\Users\T-BAG\AppData\Local\Microsoft\Windows\GameExplorer\{385AE3CE-F9B1-44A3-BF19-4410196C846E}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.needforspeed.com/
  180. Shortcut: C:\Users\T-BAG\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.com
  181.  
  182. ==================== Loaded Modules (Whitelisted) ==============
  183.  
  184. 2014-05-15 05:19 - 2013-05-07 08:45 - 00936728 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
  185. 2016-08-06 20:19 - 2016-08-06 20:19 - 21070920 _____ () C:\Users\T-BAG\Downloads\RogueKiller (1).exe
  186. 2014-05-15 05:34 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
  187. 2014-05-15 05:19 - 2016-08-06 20:18 - 00028672 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
  188. 2014-05-15 05:19 - 2013-05-07 08:45 - 00104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
  189. 2016-08-05 17:50 - 2016-08-03 01:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
  190. 2016-08-05 17:50 - 2016-08-03 01:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
  191. 2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
  192. 2014-07-31 12:16 - 2014-07-31 12:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
  193.  
  194. ==================== Alternate Data Streams (Whitelisted) =========
  195.  
  196. (If an entry is included in the fixlist, only the ADS will be removed.)
  197.  
  198. AlternateDataStreams: C:\Eula.txt:$CmdZnID [26]
  199. AlternateDataStreams: C:\Volumeid.exe:$CmdTcID [64]
  200. AlternateDataStreams: C:\Volumeid.exe:$CmdZnID [26]
  201. AlternateDataStreams: C:\Program Files (x86)\fraps.exe:$CmdTcID [64]
  202. AlternateDataStreams: C:\Program Files (x86)\fraps64.dat:$CmdTcID [64]
  203. AlternateDataStreams: C:\Program Files (x86)\uninstall.exe:$CmdTcID [64]
  204. AlternateDataStreams: C:\Windows\RtlExUpd.dll:$CmdTcID [64]
  205. AlternateDataStreams: C:\Windows\WLXPGSS.SCR:$CmdTcID [64]
  206. AlternateDataStreams: C:\Windows\system32\aaclient.dll:$CmdTcID [64]
  207. AlternateDataStreams: C:\Windows\system32\AcpiServiceVnA64.dll:$CmdTcID [64]
  208. AlternateDataStreams: C:\Windows\system32\adprovider.dll:$CmdTcID [64]
  209. AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID [64]
  210. AlternateDataStreams: C:\Windows\system32\AERTAC64.dll:$CmdTcID [64]
  211. AlternateDataStreams: C:\Windows\system32\AERTAR64.dll:$CmdTcID [64]
  212. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
  213. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
  214. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
  215. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
  216. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
  217. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
  218. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
  219. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64]
  220. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64]
  221. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
  222. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
  223. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
  224. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
  225. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
  226. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
  227. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64]
  228. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
  229. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
  230. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
  231. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
  232. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
  233. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
  234. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64]
  235. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
  236. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64]
  237. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
  238. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
  239. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64]
  240. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
  241. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
  242. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64]
  243. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
  244. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
  245. AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [130]
  246. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
  247. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64]
  248. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64]
  249. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64]
  250. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
  251. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
  252. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
  253. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
  254. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64]
  255. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64]
  256. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [130]
  257. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64]
  258. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64]
  259. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64]
  260. AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64]
  261. AlternateDataStreams: C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID [64]
  262. AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
  263. AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID [64]
  264. AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID [64]
  265. AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [64]
  266. AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID [64]
  267. AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
  268. AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
  269. AlternateDataStreams: C:\Windows\system32\audioLibVc.dll:$CmdTcID [64]
  270. AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
  271. AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
  272. AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [64]
  273. AlternateDataStreams: C:\Windows\system32\browcli.dll:$CmdTcID [64]
  274. AlternateDataStreams: C:\Windows\system32\browser.dll:$CmdTcID [64]
  275. AlternateDataStreams: C:\Windows\system32\capiprovider.dll:$CmdTcID [64]
  276. AlternateDataStreams: C:\Windows\system32\cdd.dll:$CmdTcID [64]
  277. AlternateDataStreams: C:\Windows\system32\cdosys.dll:$CmdTcID [64]
  278. AlternateDataStreams: C:\Windows\system32\certenc.dll:$CmdTcID [64]
  279. AlternateDataStreams: C:\Windows\system32\certutil.exe:$CmdTcID [64]
  280. AlternateDataStreams: C:\Windows\system32\cngprovider.dll:$CmdTcID [64]
  281. AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID [64]
  282. AlternateDataStreams: C:\Windows\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [64]
  283. AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID [64]
  284. AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID [64]
  285. AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [130]
  286. AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID [64]
  287. AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID [64]
  288. AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID [64]
  289. AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID [64]
  290. AlternateDataStreams: C:\Windows\system32\cscript.exe:$CmdTcID [130]
  291. AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID [64]
  292. AlternateDataStreams: C:\Windows\system32\CX64APO.dll:$CmdTcID [64]
  293. AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID [64]
  294. AlternateDataStreams: C:\Windows\system32\DDPA64.dll:$CmdTcID [64]
  295. AlternateDataStreams: C:\Windows\system32\DDPA64F3.dll:$CmdTcID [64]
  296. AlternateDataStreams: C:\Windows\system32\DDPD64A.dll:$CmdTcID [64]
  297. AlternateDataStreams: C:\Windows\system32\DDPD64AF3.dll:$CmdTcID [64]
  298. AlternateDataStreams: C:\Windows\system32\DDPO64A.dll:$CmdTcID [64]
  299. AlternateDataStreams: C:\Windows\system32\DDPO64AF3.dll:$CmdTcID [64]
  300. AlternateDataStreams: C:\Windows\system32\DDPP64A.dll:$CmdTcID [64]
  301. AlternateDataStreams: C:\Windows\system32\DDPP64AF3.dll:$CmdTcID [64]
  302. AlternateDataStreams: C:\Windows\system32\dfshim.dll:$CmdTcID [64]
  303. AlternateDataStreams: C:\Windows\system32\dimsroam.dll:$CmdTcID [64]
  304. AlternateDataStreams: C:\Windows\system32\dnsapi.dll:$CmdTcID [64]
  305. AlternateDataStreams: C:\Windows\system32\dnscacheugc.exe:$CmdTcID [64]
  306. AlternateDataStreams: C:\Windows\system32\dnsrslvr.dll:$CmdTcID [64]
  307. AlternateDataStreams: C:\Windows\system32\DolbyDAX2APOProp.dll:$CmdTcID [64]
  308. AlternateDataStreams: C:\Windows\system32\DolbyDAX2APOv201.dll:$CmdTcID [64]
  309. AlternateDataStreams: C:\Windows\system32\DolbyDAX2APOv211.dll:$CmdTcID [64]
  310. AlternateDataStreams: C:\Windows\system32\dpapiprovider.dll:$CmdTcID [64]
  311. AlternateDataStreams: C:\Windows\system32\dpnet.dll:$CmdTcID [64]
  312. AlternateDataStreams: C:\Windows\system32\DTSBassEnhancementDLL64.dll:$CmdTcID [64]
  313. AlternateDataStreams: C:\Windows\system32\DTSBoostDLL64.dll:$CmdTcID [64]
  314. AlternateDataStreams: C:\Windows\system32\DTSGainCompensatorDLL64.dll:$CmdTcID [64]
  315. AlternateDataStreams: C:\Windows\system32\DTSGFXAPO64.dll:$CmdTcID [130]
  316. AlternateDataStreams: C:\Windows\system32\DTSGFXAPONS64.dll:$CmdTcID [64]
  317. AlternateDataStreams: C:\Windows\system32\DTSLFXAPO64.dll:$CmdTcID [64]
  318. AlternateDataStreams: C:\Windows\system32\DTSLimiterDLL64.dll:$CmdTcID [64]
  319. AlternateDataStreams: C:\Windows\system32\DTSNeoPCDLL64.dll:$CmdTcID [64]
  320. AlternateDataStreams: C:\Windows\system32\DTSS2HeadphoneDLL64.dll:$CmdTcID [64]
  321. AlternateDataStreams: C:\Windows\system32\DTSS2SpeakerDLL64.dll:$CmdTcID [64]
  322. AlternateDataStreams: C:\Windows\system32\DTSSymmetryDLL64.dll:$CmdTcID [64]
  323. AlternateDataStreams: C:\Windows\system32\DTSU2PGFX64.dll:$CmdTcID [64]
  324. AlternateDataStreams: C:\Windows\system32\DTSU2PLFX64.dll:$CmdTcID [64]
  325. AlternateDataStreams: C:\Windows\system32\DTSU2PREC64.dll:$CmdTcID [64]
  326. AlternateDataStreams: C:\Windows\system32\DTSVoiceClarityDLL64.dll:$CmdTcID [64]
  327. AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64]
  328. AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
  329. AlternateDataStreams: C:\Windows\system32\FMAPO64.dll:$CmdTcID [64]
  330. AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID [64]
  331. AlternateDataStreams: C:\Windows\system32\FWPUCLNT.DLL:$CmdTcID [64]
  332. AlternateDataStreams: C:\Windows\system32\FXSCOVER.exe:$CmdTcID [64]
  333. AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [64]
  334. AlternateDataStreams: C:\Windows\system32\HiFiDAX2API.dll:$CmdTcID [64]
  335. AlternateDataStreams: C:\Windows\system32\hpinkcoiC211.dll:$CmdTcID [64]
  336. AlternateDataStreams: C:\Windows\system32\hpinkinsC211.exe:$CmdTcID [64]
  337. AlternateDataStreams: C:\Windows\system32\hpinkstsC211LM.dll:$CmdTcID [64]
  338. AlternateDataStreams: C:\Windows\system32\HPScanTRDrv_DJ2540.dll:$CmdTcID [64]
  339. AlternateDataStreams: C:\Windows\system32\HPWia2_DJ2540.dll:$CmdTcID [64]
  340. AlternateDataStreams: C:\Windows\system32\icardagt.exe:$CmdTcID [64]
  341. AlternateDataStreams: C:\Windows\system32\icardres.dll:$CmdTcID [64]
  342. AlternateDataStreams: C:\Windows\system32\ICEsoundAPO64.dll:$CmdTcID [64]
  343. AlternateDataStreams: C:\Windows\system32\IEUDINIT.EXE:$CmdTcID [64]
  344. AlternateDataStreams: C:\Windows\system32\IKEEXT.DLL:$CmdTcID [64]
  345. AlternateDataStreams: C:\Windows\system32\imagehlp.dll:$CmdTcID [64]
  346. AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [64]
  347. AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID [130]
  348. AlternateDataStreams: C:\Windows\system32\infocardapi.dll:$CmdTcID [64]
  349. AlternateDataStreams: C:\Windows\system32\IntelSSTAPO.dll:$CmdTcID [64]
  350. AlternateDataStreams: C:\Windows\system32\IntelSstCApoPropPage.dll:$CmdTcID [64]
  351. AlternateDataStreams: C:\Windows\system32\KAAPORT64.dll:$CmdTcID [64]
  352. AlternateDataStreams: C:\Windows\system32\kd1394.dll:$CmdTcID [64]
  353. AlternateDataStreams: C:\Windows\system32\kdcom.dll:$CmdTcID [64]
  354. AlternateDataStreams: C:\Windows\system32\kdusb.dll:$CmdTcID [64]
  355. AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
  356. AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID [64]
  357. AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
  358. AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [64]
  359. AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID [64]
  360. AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
  361. AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [64]
  362. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO20.dll:$CmdTcID [64]
  363. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO30.dll:$CmdTcID [64]
  364. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO4064.dll:$CmdTcID [64]
  365. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO5064.dll:$CmdTcID [64]
  366. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO6064.dll:$CmdTcID [64]
  367. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPO7064.dll:$CmdTcID [64]
  368. AlternateDataStreams: C:\Windows\system32\MaxxAudioAPOShell64.dll:$CmdTcID [64]
  369. AlternateDataStreams: C:\Windows\system32\MaxxAudioEQ64.dll:$CmdTcID [64]
  370. AlternateDataStreams: C:\Windows\system32\MaxxAudioRealtek64.dll:$CmdTcID [64]
  371. AlternateDataStreams: C:\Windows\system32\MaxxSpeechAPO64.dll:$CmdTcID [64]
  372. AlternateDataStreams: C:\Windows\system32\MaxxVoiceAPO2064.dll:$CmdTcID [64]
  373. AlternateDataStreams: C:\Windows\system32\MaxxVoiceAPO3064.dll:$CmdTcID [64]
  374. AlternateDataStreams: C:\Windows\system32\MaxxVoiceAPO4064.dll:$CmdTcID [64]
  375. AlternateDataStreams: C:\Windows\system32\MaxxVolumeSDAPO.dll:$CmdTcID [64]
  376. AlternateDataStreams: C:\Windows\system32\mfc42.dll:$CmdTcID [64]
  377. AlternateDataStreams: C:\Windows\system32\mfc42u.dll:$CmdTcID [64]
  378. AlternateDataStreams: C:\Windows\system32\MISS_APO.dll:$CmdTcID [64]
  379. AlternateDataStreams: C:\Windows\system32\mpg2splt.ax:$CmdTcID [64]
  380. AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
  381. AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID [64]
  382. AlternateDataStreams: C:\Windows\system32\mscorier.dll:$CmdTcID [64]
  383. AlternateDataStreams: C:\Windows\system32\mscories.dll:$CmdTcID [64]
  384. AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64]
  385. AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID [64]
  386. AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID [64]
  387. AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID [64]
  388. AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
  389. AlternateDataStreams: C:\Windows\system32\msvcrt.dll:$CmdTcID [64]
  390. AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
  391. AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64]
  392. AlternateDataStreams: C:\Windows\system32\msxml6.dll:$CmdTcID [64]
  393. AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID [64]
  394. AlternateDataStreams: C:\Windows\system32\NAHIMICAPOlfx.dll:$CmdTcID [130]
  395. AlternateDataStreams: C:\Windows\system32\NahimicAPONSControl.dll:$CmdTcID [64]
  396. AlternateDataStreams: C:\Windows\system32\NAHIMICV2apo.dll:$CmdTcID [64]
  397. AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
  398. AlternateDataStreams: C:\Windows\system32\ncsi.dll:$CmdTcID [64]
  399. AlternateDataStreams: C:\Windows\system32\netapi32.dll:$CmdTcID [64]
  400. AlternateDataStreams: C:\Windows\system32\nlaapi.dll:$CmdTcID [64]
  401. AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID [64]
  402. AlternateDataStreams: C:\Windows\system32\nshwfp.dll:$CmdTcID [64]
  403. AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [64]
  404. AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [64]
  405. AlternateDataStreams: C:\Windows\system32\nvapi64.dll:$CmdTcID [64]
  406. AlternateDataStreams: C:\Windows\system32\nvaudcap64v.dll:$CmdTcID [64]
  407. AlternateDataStreams: C:\Windows\system32\nvcuda.dll:$CmdTcID [64]
  408. AlternateDataStreams: C:\Windows\system32\nvcuvid.dll:$CmdTcID [64]
  409. AlternateDataStreams: C:\Windows\system32\nvd3dumx.dll:$CmdTcID [64]
  410. AlternateDataStreams: C:\Windows\system32\nvdispco6435306.dll:$CmdTcID [64]
  411. AlternateDataStreams: C:\Windows\system32\nvdispco6436175.dll:$CmdTcID [64]
  412. AlternateDataStreams: C:\Windows\system32\nvdispco6436451.dll:$CmdTcID [64]
  413. AlternateDataStreams: C:\Windows\system32\nvdispgenco6435306.dll:$CmdTcID [64]
  414. AlternateDataStreams: C:\Windows\system32\nvdispgenco6436175.dll:$CmdTcID [64]
  415. AlternateDataStreams: C:\Windows\system32\nvdispgenco6436451.dll:$CmdTcID [64]
  416. AlternateDataStreams: C:\Windows\system32\nvEncodeAPI64.dll:$CmdTcID [64]
  417. AlternateDataStreams: C:\Windows\system32\nvfatbinaryLoader.dll:$CmdTcID [64]
  418. AlternateDataStreams: C:\Windows\system32\NvFBC64.dll:$CmdTcID [64]
  419. AlternateDataStreams: C:\Windows\system32\nvhdagenco6420103.dll:$CmdTcID [130]
  420. AlternateDataStreams: C:\Windows\system32\nvhdap64.dll:$CmdTcID [130]
  421. AlternateDataStreams: C:\Windows\system32\NvIFR64.dll:$CmdTcID [64]
  422. AlternateDataStreams: C:\Windows\system32\NvIFROpenGL.dll:$CmdTcID [64]
  423. AlternateDataStreams: C:\Windows\system32\nvinitx.dll:$CmdTcID [64]
  424. AlternateDataStreams: C:\Windows\system32\nvoglshim64.dll:$CmdTcID [64]
  425. AlternateDataStreams: C:\Windows\system32\nvoglv64.dll:$CmdTcID [64]
  426. AlternateDataStreams: C:\Windows\system32\nvopencl.dll:$CmdTcID [64]
  427. AlternateDataStreams: C:\Windows\system32\nvptxJitCompiler.dll:$CmdTcID [64]
  428. AlternateDataStreams: C:\Windows\system32\nvumdshimx.dll:$CmdTcID [64]
  429. AlternateDataStreams: C:\Windows\system32\nvvsvc.exe:$CmdTcID [64]
  430. AlternateDataStreams: C:\Windows\system32\nvwgf2umx.dll:$CmdTcID [64]
  431. AlternateDataStreams: C:\Windows\system32\objsel.dll:$CmdTcID [64]
  432. AlternateDataStreams: C:\Windows\system32\odbccp32.dll:$CmdTcID [64]
  433. AlternateDataStreams: C:\Windows\system32\odbccr32.dll:$CmdTcID [64]
  434. AlternateDataStreams: C:\Windows\system32\odbccu32.dll:$CmdTcID [64]
  435. AlternateDataStreams: C:\Windows\system32\odbctrac.dll:$CmdTcID [64]
  436. AlternateDataStreams: C:\Windows\system32\oleacc.dll:$CmdTcID [64]
  437. AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID [130]
  438. AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64]
  439. AlternateDataStreams: C:\Windows\system32\osk.exe:$CmdTcID [130]
  440. AlternateDataStreams: C:\Windows\system32\packager.dll:$CmdTcID [64]
  441. AlternateDataStreams: C:\Windows\system32\pku2u.dll:$CmdTcID [64]
  442. AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
  443. AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [130]
  444. AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID [64]
  445. AlternateDataStreams: C:\Windows\system32\psisdecd.dll:$CmdTcID [64]
  446. AlternateDataStreams: C:\Windows\system32\psisrndr.ax:$CmdTcID [64]
  447. AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
  448. AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [130]
  449. AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
  450. AlternateDataStreams: C:\Windows\system32\R4EEA64A.dll:$CmdTcID [130]
  451. AlternateDataStreams: C:\Windows\system32\R4EED64A.dll:$CmdTcID [64]
  452. AlternateDataStreams: C:\Windows\system32\R4EEG64A.dll:$CmdTcID [64]
  453. AlternateDataStreams: C:\Windows\system32\R4EEL64A.dll:$CmdTcID [64]
  454. AlternateDataStreams: C:\Windows\system32\R4EEP64A.dll:$CmdTcID [64]
  455. AlternateDataStreams: C:\Windows\system32\rastls.dll:$CmdTcID [130]
  456. AlternateDataStreams: C:\Windows\system32\RCoInstII64.dll:$CmdTcID [64]
  457. AlternateDataStreams: C:\Windows\system32\rdpcore.dll:$CmdTcID [64]
  458. AlternateDataStreams: C:\Windows\system32\rdpcorekmts.dll:$CmdTcID [64]
  459. AlternateDataStreams: C:\Windows\system32\rdpwsx.dll:$CmdTcID [64]
  460. AlternateDataStreams: C:\Windows\system32\rdrmemptylst.exe:$CmdTcID [64]
  461. AlternateDataStreams: C:\Windows\system32\RltkAPO64.dll:$CmdTcID [130]
  462. AlternateDataStreams: C:\Windows\system32\RP3DAA64.dll:$CmdTcID [64]
  463. AlternateDataStreams: C:\Windows\system32\RP3DHT64.dll:$CmdTcID [64]
  464. AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
  465. AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID [64]
  466. AlternateDataStreams: C:\Windows\system32\RTCOM64.dll:$CmdTcID [64]
  467. AlternateDataStreams: C:\Windows\system32\RtDataProc64.dll:$CmdTcID [130]
  468. AlternateDataStreams: C:\Windows\system32\RTEED64A.dll:$CmdTcID [64]
  469. AlternateDataStreams: C:\Windows\system32\RTEEG64A.dll:$CmdTcID [64]
  470. AlternateDataStreams: C:\Windows\system32\RTEEL64A.dll:$CmdTcID [64]
  471. AlternateDataStreams: C:\Windows\system32\RTEEP64A.dll:$CmdTcID [64]
  472. AlternateDataStreams: C:\Windows\system32\RtkApi64.dll:$CmdTcID [64]
  473. AlternateDataStreams: C:\Windows\system32\RtkCfg64.dll:$CmdTcID [64]
  474. AlternateDataStreams: C:\Windows\system32\RtkCoLDR64.dll:$CmdTcID [64]
  475. AlternateDataStreams: C:\Windows\system32\RtlCPAPI64.dll:$CmdTcID [64]
  476. AlternateDataStreams: C:\Windows\system32\RtPgEx64.dll:$CmdTcID [64]
  477. AlternateDataStreams: C:\Windows\system32\RTSnMg64.cpl:$CmdTcID [64]
  478. AlternateDataStreams: C:\Windows\system32\sbe.dll:$CmdTcID [64]
  479. AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID [64]
  480. AlternateDataStreams: C:\Windows\system32\scrrun.dll:$CmdTcID [64]
  481. AlternateDataStreams: C:\Windows\system32\SEAPO64.dll:$CmdTcID [64]
  482. AlternateDataStreams: C:\Windows\system32\SECOMN64.dll:$CmdTcID [64]
  483. AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID [64]
  484. AlternateDataStreams: C:\Windows\system32\SEHDRA64.dll:$CmdTcID [64]
  485. AlternateDataStreams: C:\Windows\system32\SFAPO64.dll:$CmdTcID [64]
  486. AlternateDataStreams: C:\Windows\system32\SFCOM64.dll:$CmdTcID [64]
  487. AlternateDataStreams: C:\Windows\system32\SFNHK64.dll:$CmdTcID [64]
  488. AlternateDataStreams: C:\Windows\system32\SFSS_APO.dll:$CmdTcID [64]
  489. AlternateDataStreams: C:\Windows\system32\shdocvw.dll:$CmdTcID [64]
  490. AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64]
  491. AlternateDataStreams: C:\Windows\system32\sl3apo64.dll:$CmdTcID [64]
  492. AlternateDataStreams: C:\Windows\system32\slcnt64.dll:$CmdTcID [64]
  493. AlternateDataStreams: C:\Windows\system32\slprp64.dll:$CmdTcID [64]
  494. AlternateDataStreams: C:\Windows\system32\sltech64.dll:$CmdTcID [64]
  495. AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID [64]
  496. AlternateDataStreams: C:\Windows\system32\SRAPO64.dll:$CmdTcID [64]
  497. AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID [64]
  498. AlternateDataStreams: C:\Windows\system32\SRCOM.dll:$CmdTcID [64]
  499. AlternateDataStreams: C:\Windows\system32\SRCOM64.dll:$CmdTcID [64]
  500. AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID [64]
  501. AlternateDataStreams: C:\Windows\system32\SRRPTR64.dll:$CmdTcID [64]
  502. AlternateDataStreams: C:\Windows\system32\SRSHP64.dll:$CmdTcID [64]
  503. AlternateDataStreams: C:\Windows\system32\SRSTSH64.dll:$CmdTcID [64]
  504. AlternateDataStreams: C:\Windows\system32\SRSTSX64.dll:$CmdTcID [64]
  505. AlternateDataStreams: C:\Windows\system32\SRSWOW64.dll:$CmdTcID [64]
  506. AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID [64]
  507. AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID [64]
  508. AlternateDataStreams: C:\Windows\system32\synceng.dll:$CmdTcID [64]
  509. AlternateDataStreams: C:\Windows\system32\tadefxapo.dll:$CmdTcID [64]
  510. AlternateDataStreams: C:\Windows\system32\tadefxapo264.dll:$CmdTcID [64]
  511. AlternateDataStreams: C:\Windows\system32\taskhost.exe:$CmdTcID [64]
  512. AlternateDataStreams: C:\Windows\system32\tepeqapo64.dll:$CmdTcID [64]
  513. AlternateDataStreams: C:\Windows\system32\termsrv.dll:$CmdTcID [64]
  514. AlternateDataStreams: C:\Windows\system32\tosade.dll:$CmdTcID [64]
  515. AlternateDataStreams: C:\Windows\system32\tosasfapo64.dll:$CmdTcID [130]
  516. AlternateDataStreams: C:\Windows\system32\toseaeapo64.dll:$CmdTcID [64]
  517. AlternateDataStreams: C:\Windows\system32\tossaeapo64.dll:$CmdTcID [64]
  518. AlternateDataStreams: C:\Windows\system32\tossaemaxapo64.dll:$CmdTcID [64]
  519. AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID [64]
  520. AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [64]
  521. AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID [64]
  522. AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [64]
  523. AlternateDataStreams: C:\Windows\system32\ucrtbase.dll:$CmdTcID [64]
  524. AlternateDataStreams: C:\Windows\system32\umpnpmgr.dll:$CmdTcID [64]
  525. AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [64]
  526. AlternateDataStreams: C:\Windows\system32\vulkaninfo-1-1-0-3-0.exe:$CmdTcID [64]
  527. AlternateDataStreams: C:\Windows\system32\vulkaninfo.exe:$CmdTcID [64]
  528. AlternateDataStreams: C:\Windows\system32\WavesGUILib64.dll:$CmdTcID [64]
  529. AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID [64]
  530. AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID [64]
  531. AlternateDataStreams: C:\Windows\system32\wer.dll:$CmdTcID [64]
  532. AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [64]
  533. AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [64]
  534. AlternateDataStreams: C:\Windows\system32\wincredprovider.dll:$CmdTcID [64]
  535. AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID [64]
  536. AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID [64]
  537. AlternateDataStreams: C:\Windows\system32\winlogon.exe:$CmdTcID [64]
  538. AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID [64]
  539. AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID [130]
  540. AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64]
  541. AlternateDataStreams: C:\Windows\system32\winsta.dll:$CmdTcID [64]
  542. AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID [64]
  543. AlternateDataStreams: C:\Windows\system32\wmi.dll:$CmdTcID [64]
  544. AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
  545. AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [130]
  546. AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
  547. AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID [64]
  548. AlternateDataStreams: C:\Windows\system32\wscript.exe:$CmdTcID [64]
  549. AlternateDataStreams: C:\Windows\system32\wshom.ocx:$CmdTcID [64]
  550. AlternateDataStreams: C:\Windows\system32\WTFastDrv.dll:$CmdTcID [64]
  551. AlternateDataStreams: C:\Windows\system32\xvid.ax:$CmdTcID [64]
  552. AlternateDataStreams: C:\Windows\system32\xvidcore.dll:$CmdTcID [64]
  553. AlternateDataStreams: C:\Windows\system32\xvidvfw.dll:$CmdTcID [64]
  554. AlternateDataStreams: C:\Windows\system32\YamahaAE.dll:$CmdTcID [64]
  555. AlternateDataStreams: C:\Windows\system32\YamahaAE2.dll:$CmdTcID [130]
  556. AlternateDataStreams: C:\Windows\SysWOW64\aaclient.dll:$CmdTcID [64]
  557. AlternateDataStreams: C:\Windows\SysWOW64\adprovider.dll:$CmdTcID [64]
  558. AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID [64]
  559. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
  560. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
  561. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
  562. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
  563. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
  564. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
  565. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
  566. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64]
  567. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64]
  568. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
  569. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
  570. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
  571. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
  572. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
  573. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
  574. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64]
  575. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
  576. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
  577. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
  578. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
  579. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
  580. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
  581. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64]
  582. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
  583. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64]
  584. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
  585. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
  586. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64]
  587. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
  588. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
  589. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64]
  590. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
  591. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
  592. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64]
  593. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
  594. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64]
  595. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64]
  596. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64]
  597. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
  598. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
  599. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
  600. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
  601. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64]
  602. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64]
  603. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64]
  604. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64]
  605. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64]
  606. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64]
  607. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64]
  608. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID [64]
  609. AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
  610. AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID [64]
  611. AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID [130]
  612. AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID [64]
  613. AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
  614. AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
  615. AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
  616. AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID [64]
  617. AlternateDataStreams: C:\Windows\SysWOW64\browcli.dll:$CmdTcID [64]
  618. AlternateDataStreams: C:\Windows\SysWOW64\capiprovider.dll:$CmdTcID [64]
  619. AlternateDataStreams: C:\Windows\SysWOW64\cdosys.dll:$CmdTcID [130]
  620. AlternateDataStreams: C:\Windows\SysWOW64\certenc.dll:$CmdTcID [64]
  621. AlternateDataStreams: C:\Windows\SysWOW64\certutil.exe:$CmdTcID [64]
  622. AlternateDataStreams: C:\Windows\SysWOW64\cfgmgr32.dll:$CmdTcID [64]
  623. AlternateDataStreams: C:\Windows\SysWOW64\cngprovider.dll:$CmdTcID [64]
  624. AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID [64]
  625. AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
  626. AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID [64]
  627. AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID [64]
  628. AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID [64]
  629. AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID [64]
  630. AlternateDataStreams: C:\Windows\SysWOW64\cscript.exe:$CmdTcID [64]
  631. AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID [64]
  632. AlternateDataStreams: C:\Windows\SysWOW64\devobj.dll:$CmdTcID [64]
  633. AlternateDataStreams: C:\Windows\SysWOW64\devrtl.dll:$CmdTcID [64]
  634. AlternateDataStreams: C:\Windows\SysWOW64\dfshim.dll:$CmdTcID [130]
  635. AlternateDataStreams: C:\Windows\SysWOW64\dimsroam.dll:$CmdTcID [64]
  636. AlternateDataStreams: C:\Windows\SysWOW64\dnsapi.dll:$CmdTcID [64]
  637. AlternateDataStreams: C:\Windows\SysWOW64\dnscacheugc.exe:$CmdTcID [64]
  638. AlternateDataStreams: C:\Windows\SysWOW64\dpapiprovider.dll:$CmdTcID [64]
  639. AlternateDataStreams: C:\Windows\SysWOW64\dpnet.dll:$CmdTcID [64]
  640. AlternateDataStreams: C:\Windows\SysWOW64\drvinst.exe:$CmdTcID [64]
  641. AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID [64]
  642. AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
  643. AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerInstaller.exe:$CmdTcID [64]
  644. AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID [64]
  645. AlternateDataStreams: C:\Windows\SysWOW64\FWPUCLNT.DLL:$CmdTcID [64]
  646. AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
  647. AlternateDataStreams: C:\Windows\SysWOW64\icardagt.exe:$CmdTcID [64]
  648. AlternateDataStreams: C:\Windows\SysWOW64\icardres.dll:$CmdTcID [64]
  649. AlternateDataStreams: C:\Windows\SysWOW64\imagehlp.dll:$CmdTcID [64]
  650. AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64]
  651. AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID [64]
  652. AlternateDataStreams: C:\Windows\SysWOW64\infocardapi.dll:$CmdTcID [64]
  653. AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID [64]
  654. AlternateDataStreams: C:\Windows\SysWOW64\java.exe:$CmdTcID [64]
  655. AlternateDataStreams: C:\Windows\SysWOW64\javaw.exe:$CmdTcID [64]
  656. AlternateDataStreams: C:\Windows\SysWOW64\javaws.exe:$CmdTcID [64]
  657. AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
  658. AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID [64]
  659. AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
  660. AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID [64]
  661. AlternateDataStreams: C:\Windows\SysWOW64\mfc42.dll:$CmdTcID [64]
  662. AlternateDataStreams: C:\Windows\SysWOW64\mfc42u.dll:$CmdTcID [64]
  663. AlternateDataStreams: C:\Windows\SysWOW64\mpg2splt.ax:$CmdTcID [64]
  664. AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID [64]
  665. AlternateDataStreams: C:\Windows\SysWOW64\MSCOMCTL.OCX:$CmdTcID [64]
  666. AlternateDataStreams: C:\Windows\SysWOW64\mscorier.dll:$CmdTcID [64]
  667. AlternateDataStreams: C:\Windows\SysWOW64\mscories.dll:$CmdTcID [64]
  668. AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [64]
  669. AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID [64]
  670. AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID [64]
  671. AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID [64]
  672. AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
  673. AlternateDataStreams: C:\Windows\SysWOW64\msvcrt.dll:$CmdTcID [64]
  674. AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
  675. AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [64]
  676. AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
  677. AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID [64]
  678. AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
  679. AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID [64]
  680. AlternateDataStreams: C:\Windows\SysWOW64\netapi32.dll:$CmdTcID [64]
  681. AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID [64]
  682. AlternateDataStreams: C:\Windows\SysWOW64\nshwfp.dll:$CmdTcID [64]
  683. AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID [64]
  684. AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID [64]
  685. AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
  686. AlternateDataStreams: C:\Windows\SysWOW64\nvapi.dll:$CmdTcID [64]
  687. AlternateDataStreams: C:\Windows\SysWOW64\nvaudcap32v.dll:$CmdTcID [64]
  688. AlternateDataStreams: C:\Windows\SysWOW64\nvcompiler.dll:$CmdTcID [64]
  689. AlternateDataStreams: C:\Windows\SysWOW64\nvcuda.dll:$CmdTcID [64]
  690. AlternateDataStreams: C:\Windows\SysWOW64\nvcuvid.dll:$CmdTcID [64]
  691. AlternateDataStreams: C:\Windows\SysWOW64\nvd3dum.dll:$CmdTcID [64]
  692. AlternateDataStreams: C:\Windows\SysWOW64\nvEncodeAPI.dll:$CmdTcID [64]
  693. AlternateDataStreams: C:\Windows\SysWOW64\nvfatbinaryLoader.dll:$CmdTcID [64]
  694. AlternateDataStreams: C:\Windows\SysWOW64\NvFBC.dll:$CmdTcID [64]
  695. AlternateDataStreams: C:\Windows\SysWOW64\NvIFR.dll:$CmdTcID [64]
  696. AlternateDataStreams: C:\Windows\SysWOW64\NvIFROpenGL.dll:$CmdTcID [64]
  697. AlternateDataStreams: C:\Windows\SysWOW64\nvinit.dll:$CmdTcID [64]
  698. AlternateDataStreams: C:\Windows\SysWOW64\nvoglshim32.dll:$CmdTcID [64]
  699. AlternateDataStreams: C:\Windows\SysWOW64\nvoglv32.dll:$CmdTcID [64]
  700. AlternateDataStreams: C:\Windows\SysWOW64\nvopencl.dll:$CmdTcID [64]
  701. AlternateDataStreams: C:\Windows\SysWOW64\nvptxJitCompiler.dll:$CmdTcID [64]
  702. AlternateDataStreams: C:\Windows\SysWOW64\nvStreaming.exe:$CmdTcID [64]
  703. AlternateDataStreams: C:\Windows\SysWOW64\nvumdshim.dll:$CmdTcID [64]
  704. AlternateDataStreams: C:\Windows\SysWOW64\nvwgf2um.dll:$CmdTcID [64]
  705. AlternateDataStreams: C:\Windows\SysWOW64\objsel.dll:$CmdTcID [64]
  706. AlternateDataStreams: C:\Windows\SysWOW64\odbccp32.dll:$CmdTcID [64]
  707. AlternateDataStreams: C:\Windows\SysWOW64\odbccr32.dll:$CmdTcID [64]
  708. AlternateDataStreams: C:\Windows\SysWOW64\odbccu32.dll:$CmdTcID [64]
  709. AlternateDataStreams: C:\Windows\SysWOW64\odbcjt32.dll:$CmdTcID [64]
  710. AlternateDataStreams: C:\Windows\SysWOW64\odbctrac.dll:$CmdTcID [64]
  711. AlternateDataStreams: C:\Windows\SysWOW64\oleacc.dll:$CmdTcID [64]
  712. AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID [64]
  713. AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID [64]
  714. AlternateDataStreams: C:\Windows\SysWOW64\osk.exe:$CmdTcID [64]
  715. AlternateDataStreams: C:\Windows\SysWOW64\packager.dll:$CmdTcID [64]
  716. AlternateDataStreams: C:\Windows\SysWOW64\pku2u.dll:$CmdTcID [64]
  717. AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
  718. AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
  719. AlternateDataStreams: C:\Windows\SysWOW64\psisdecd.dll:$CmdTcID [64]
  720. AlternateDataStreams: C:\Windows\SysWOW64\psisrndr.ax:$CmdTcID [64]
  721. AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
  722. AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
  723. AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
  724. AlternateDataStreams: C:\Windows\SysWOW64\rastls.dll:$CmdTcID [64]
  725. AlternateDataStreams: C:\Windows\SysWOW64\rdpcore.dll:$CmdTcID [64]
  726. AlternateDataStreams: C:\Windows\SysWOW64\RICHTX32.OCX:$CmdTcID [64]
  727. AlternateDataStreams: C:\Windows\SysWOW64\RltkAPO.dll:$CmdTcID [64]
  728. AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
  729. AlternateDataStreams: C:\Windows\SysWOW64\sbe.dll:$CmdTcID [64]
  730. AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID [64]
  731. AlternateDataStreams: C:\Windows\SysWOW64\scrrun.dll:$CmdTcID [64]
  732. AlternateDataStreams: C:\Windows\SysWOW64\SECOMN32.DLL:$CmdTcID [64]
  733. AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID [64]
  734. AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID [64]
  735. AlternateDataStreams: C:\Windows\SysWOW64\SFCOM.dll:$CmdTcID [64]
  736. AlternateDataStreams: C:\Windows\SysWOW64\shdocvw.dll:$CmdTcID [64]
  737. AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [64]
  738. AlternateDataStreams: C:\Windows\SysWOW64\SPORDER.DLL:$CmdTcID [64]
  739. AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID [64]
  740. AlternateDataStreams: C:\Windows\SysWOW64\SRCOM.dll:$CmdTcID [64]
  741. AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID [130]
  742. AlternateDataStreams: C:\Windows\SysWOW64\synceng.dll:$CmdTcID [64]
  743. AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID [64]
  744. AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
  745. AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
  746. AlternateDataStreams: C:\Windows\SysWOW64\ucrtbase.dll:$CmdTcID [64]
  747. AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID [64]
  748. AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [64]
  749. AlternateDataStreams: C:\Windows\SysWOW64\vcamp140.dll:$CmdTcID [64]
  750. AlternateDataStreams: C:\Windows\SysWOW64\vulkaninfo-1-1-0-3-0.exe:$CmdTcID [64]
  751. AlternateDataStreams: C:\Windows\SysWOW64\vulkaninfo.exe:$CmdTcID [64]
  752. AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID [64]
  753. AlternateDataStreams: C:\Windows\SysWOW64\webio.dll:$CmdTcID [64]
  754. AlternateDataStreams: C:\Windows\SysWOW64\wer.dll:$CmdTcID [64]
  755. AlternateDataStreams: C:\Windows\SysWOW64\win32spl.dll:$CmdTcID [64]
  756. AlternateDataStreams: C:\Windows\SysWOW64\wincredprovider.dll:$CmdTcID [64]
  757. AlternateDataStreams: C:\Windows\SysWOW64\winsta.dll:$CmdTcID [64]
  758. AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID [64]
  759. AlternateDataStreams: C:\Windows\SysWOW64\wmi.dll:$CmdTcID [64]
  760. AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
  761. AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID [64]
  762. AlternateDataStreams: C:\Windows\SysWOW64\wscript.exe:$CmdTcID [64]
  763. AlternateDataStreams: C:\Windows\SysWOW64\wshom.ocx:$CmdTcID [64]
  764. AlternateDataStreams: C:\Windows\SysWOW64\WTFastDrv.dll:$CmdTcID [64]
  765. AlternateDataStreams: C:\Windows\SysWOW64\xvid.ax:$CmdTcID [64]
  766. AlternateDataStreams: C:\Windows\SysWOW64\xvidcore.dll:$CmdTcID [64]
  767. AlternateDataStreams: C:\Windows\SysWOW64\xvidvfw.dll:$CmdTcID [64]
  768. AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
  769. AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
  770. AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64]
  771. AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [64]
  772. AlternateDataStreams: C:\Windows\system32\Drivers\dxgkrnl.sys:$CmdTcID [64]
  773. AlternateDataStreams: C:\Windows\system32\Drivers\dxgmms1.sys:$CmdTcID [64]
  774. AlternateDataStreams: C:\Windows\system32\Drivers\fs_rec.sys:$CmdTcID [64]
  775. AlternateDataStreams: C:\Windows\system32\Drivers\FWPKCLNT.SYS:$CmdTcID [64]
  776. AlternateDataStreams: C:\Windows\system32\Drivers\hidclass.sys:$CmdTcID [64]
  777. AlternateDataStreams: C:\Windows\system32\Drivers\hidparse.sys:$CmdTcID [64]
  778. AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID [64]
  779. AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
  780. AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID [64]
  781. AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID [64]
  782. AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
  783. AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
  784. AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
  785. AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
  786. AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID [64]
  787. AlternateDataStreams: C:\Windows\system32\Drivers\ndisrd.sys:$CmdTcID [64]
  788. AlternateDataStreams: C:\Windows\system32\Drivers\netio.sys:$CmdTcID [64]
  789. AlternateDataStreams: C:\Windows\system32\Drivers\ntfs.sys:$CmdTcID [64]
  790. AlternateDataStreams: C:\Windows\system32\Drivers\nvhda64v.sys:$CmdTcID [130]
  791. AlternateDataStreams: C:\Windows\system32\Drivers\nvlddmkm.sys:$CmdTcID [64]
  792. AlternateDataStreams: C:\Windows\system32\Drivers\nvvad64v.sys:$CmdTcID [64]
  793. AlternateDataStreams: C:\Windows\system32\Drivers\partmgr.sys:$CmdTcID [64]
  794. AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [64]
  795. AlternateDataStreams: C:\Windows\system32\Drivers\rdpwd.sys:$CmdTcID [64]
  796. AlternateDataStreams: C:\Windows\system32\Drivers\RTKVHD64.sys:$CmdTcID [64]
  797. AlternateDataStreams: C:\Windows\system32\Drivers\rzendpt.sys:$CmdTcID [64]
  798. AlternateDataStreams: C:\Windows\system32\Drivers\rzudd.sys:$CmdTcID [64]
  799. AlternateDataStreams: C:\Windows\system32\Drivers\srv.sys:$CmdTcID [64]
  800. AlternateDataStreams: C:\Windows\system32\Drivers\srv2.sys:$CmdTcID [64]
  801. AlternateDataStreams: C:\Windows\system32\Drivers\srvnet.sys:$CmdTcID [64]
  802. AlternateDataStreams: C:\Windows\system32\Drivers\tap0901.sys:$CmdTcID [64]
  803. AlternateDataStreams: C:\Windows\system32\Drivers\taphss6.sys:$CmdTcID [64]
  804. AlternateDataStreams: C:\Windows\system32\Drivers\tcpip.sys:$CmdTcID [64]
  805. AlternateDataStreams: C:\Windows\system32\Drivers\tdtcp.sys:$CmdTcID [64]
  806. AlternateDataStreams: C:\Windows\system32\Drivers\tssecsrv.sys:$CmdTcID [64]
  807. AlternateDataStreams: C:\Windows\system32\Drivers\usb8023.sys:$CmdTcID [64]
  808. AlternateDataStreams: C:\Windows\system32\Drivers\usbccgp.sys:$CmdTcID [64]
  809. AlternateDataStreams: C:\Windows\system32\Drivers\usbcir.sys:$CmdTcID [64]
  810. AlternateDataStreams: C:\Windows\system32\Drivers\usbd.sys:$CmdTcID [64]
  811. AlternateDataStreams: C:\Windows\system32\Drivers\usbehci.sys:$CmdTcID [64]
  812. AlternateDataStreams: C:\Windows\system32\Drivers\usbhub.sys:$CmdTcID [64]
  813. AlternateDataStreams: C:\Windows\system32\Drivers\usbport.sys:$CmdTcID [64]
  814. AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID [64]
  815. AlternateDataStreams: C:\Windows\system32\Drivers\Wdf01000.sys:$CmdTcID [64]
  816. AlternateDataStreams: C:\Windows\SysWOW64\Drivers\ASUSFILTER.sys:$CmdZnID [26]
  817. AlternateDataStreams: C:\Users\T-BAG\ffmpeg.exe:$CmdTcID [64]
  818. AlternateDataStreams: C:\Users\T-BAG\ffmpeg.exe:$CmdZnID [26]
  819. AlternateDataStreams: C:\Users\T-BAG\Desktop\1456207506390.jpg:$CmdZnID [26]
  820. AlternateDataStreams: C:\Users\T-BAG\Desktop\1459344115109.jpg:$CmdZnID [26]
  821. AlternateDataStreams: C:\Users\T-BAG\Desktop\1459363772106.jpg:$CmdZnID [26]
  822. AlternateDataStreams: C:\Users\T-BAG\Desktop\1459367823493.jpg:$CmdZnID [26]
  823. AlternateDataStreams: C:\Users\T-BAG\Desktop\1462226228486.jpg:$CmdZnID [26]
  824. AlternateDataStreams: C:\Users\T-BAG\Desktop\200_s.gif:$CmdZnID [26]
  825. AlternateDataStreams: C:\Users\T-BAG\Desktop\3451044-1607572-1593220_36.jpg:$CmdZnID [26]
  826. AlternateDataStreams: C:\Users\T-BAG\Desktop\7ffaef96.exe:$CmdTcID [64]
  827. AlternateDataStreams: C:\Users\T-BAG\Desktop\7ffaef96.exe:$CmdZnID [26]
  828. AlternateDataStreams: C:\Users\T-BAG\Desktop\;_;.jpg:$CmdZnID [26]
  829. AlternateDataStreams: C:\Users\T-BAG\Desktop\Adolf_Hitler_cropped_restored.jpg:$CmdZnID [26]
  830. AlternateDataStreams: C:\Users\T-BAG\Desktop\americann.jpg:$CmdZnID [26]
  831. AlternateDataStreams: C:\Users\T-BAG\Desktop\americans.jpg:$CmdZnID [26]
  832. AlternateDataStreams: C:\Users\T-BAG\Desktop\Apply-for-a-licence-to-drive-a-private-hire-vehicle.pdf:$CmdZnID [26]
  833. AlternateDataStreams: C:\Users\T-BAG\Desktop\assassination-of-jesse-james-by-the-coward-robert-ford.jpg:$CmdZnID [26]
  834. AlternateDataStreams: C:\Users\T-BAG\Desktop\BALONGREYJOY.png:$CmdZnID [26]
  835. AlternateDataStreams: C:\Users\T-BAG\Desktop\banjaminbuttonart.jpg:$CmdZnID [26]
  836. AlternateDataStreams: C:\Users\T-BAG\Desktop\bDWZjOAZgquuLg473VZeDBMmwq8NIAE.exe:$CmdTcID [64]
  837. AlternateDataStreams: C:\Users\T-BAG\Desktop\Changelog.txt:$CmdZnID [26]
  838. AlternateDataStreams: C:\Users\T-BAG\Desktop\cinema.jpg:$CmdZnID [26]
  839. AlternateDataStreams: C:\Users\T-BAG\Desktop\ComplX Multihack v0.7.4.exe:$CmdTcID [64]
  840. AlternateDataStreams: C:\Users\T-BAG\Desktop\ComplX Multihack v0.7.4.exe:$CmdZnID [26]
  841. AlternateDataStreams: C:\Users\T-BAG\Desktop\dasLebenderAnderen.jpg:$CmdZnID [26]
  842. AlternateDataStreams: C:\Users\T-BAG\Desktop\davidgalemovie.jpg:$CmdZnID [26]
  843. AlternateDataStreams: C:\Users\T-BAG\Desktop\deadmentellnotales.png:$CmdZnID [26]
  844. AlternateDataStreams: C:\Users\T-BAG\Desktop\disgusting.jpg:$CmdZnID [26]
  845. AlternateDataStreams: C:\Users\T-BAG\Desktop\Drastic1 Economics Questions.doc:$CmdTcID [64]
  846. AlternateDataStreams: C:\Users\T-BAG\Desktop\Drastic1 Economics Questions.doc:$CmdZnID [26]
  847. AlternateDataStreams: C:\Users\T-BAG\Desktop\Economics submission111.pdf:$CmdZnID [26]
  848. AlternateDataStreams: C:\Users\T-BAG\Desktop\Ethan_Suplee_0042.jpg:$CmdZnID [26]
  849. AlternateDataStreams: C:\Users\T-BAG\Desktop\EVGA_PrecisionX_16_Setup.exe:$CmdTcID [64]
  850. AlternateDataStreams: C:\Users\T-BAG\Desktop\fargo_tv_on_fx.0_cinema_1200.0.png:$CmdZnID [26]
  851. AlternateDataStreams: C:\Users\T-BAG\Desktop\file_118510_0_theleftoversart.jpg:$CmdZnID [26]
  852. AlternateDataStreams: C:\Users\T-BAG\Desktop\fingerlittle.jpg:$CmdZnID [26]
  853. AlternateDataStreams: C:\Users\T-BAG\Desktop\FwPogGm7Jht8qoGdvoKfkSR459n8hWk8VZK4K4Nsgg7ZgNOI5E2u67hjUMjXPfLktlZHUCIrQO.exe:$CmdTcID [64]
  854. AlternateDataStreams: C:\Users\T-BAG\Desktop\GANYcWYZaZSXLA9c9q46ZiLWLRrp1Tdh1dDom5abWVM1mOnSSaemEPHVmnCAcfY8thWf.exe:$CmdTcID [64]
  855. AlternateDataStreams: C:\Users\T-BAG\Desktop\glowesp.exe:$CmdTcID [64]
  856. AlternateDataStreams: C:\Users\T-BAG\Desktop\glowesp.exe:$CmdZnID [26]
  857. AlternateDataStreams: C:\Users\T-BAG\Desktop\gollumx2.jpg:$CmdZnID [26]
  858. AlternateDataStreams: C:\Users\T-BAG\Desktop\h0m0.jpg:$CmdZnID [26]
  859. AlternateDataStreams: C:\Users\T-BAG\Desktop\haywire_zpsa8a2e574.jpg:$CmdZnID [26]
  860. AlternateDataStreams: C:\Users\T-BAG\Desktop\hectr.jpg:$CmdZnID [26]
  861. AlternateDataStreams: C:\Users\T-BAG\Desktop\Image__16_.jpg:$CmdZnID [26]
  862. AlternateDataStreams: C:\Users\T-BAG\Desktop\Image__17_.jpg:$CmdZnID [26]
  863. AlternateDataStreams: C:\Users\T-BAG\Desktop\Image__34_.jpg:$CmdZnID [26]
  864. AlternateDataStreams: C:\Users\T-BAG\Desktop\index.jpg:$CmdZnID [26]
  865. AlternateDataStreams: C:\Users\T-BAG\Desktop\Jack.jpg:$CmdZnID [26]
  866. AlternateDataStreams: C:\Users\T-BAG\Desktop\jake.jpg:$CmdZnID [26]
  867. AlternateDataStreams: C:\Users\T-BAG\Desktop\jinkwon.jpg:$CmdZnID [26]
  868. AlternateDataStreams: C:\Users\T-BAG\Desktop\JVC_Projector1.png:$CmdZnID [26]
  869. AlternateDataStreams: C:\Users\T-BAG\Desktop\kingstanniss.jpg:$CmdZnID [26]
  870. AlternateDataStreams: C:\Users\T-BAG\Desktop\KOKO.jpg:$CmdZnID [26]
  871. AlternateDataStreams: C:\Users\T-BAG\Desktop\laptop-repairs-colchester-essex.jpg:$CmdZnID [26]
  872. AlternateDataStreams: C:\Users\T-BAG\Desktop\leftovers.jpg:$CmdZnID [26]
  873. AlternateDataStreams: C:\Users\T-BAG\Desktop\lgvx5200.jpg:$CmdZnID [26]
  874. AlternateDataStreams: C:\Users\T-BAG\Desktop\logan-lerman-alexandra-nyc-02.jpg:$CmdZnID [26]
  875. AlternateDataStreams: C:\Users\T-BAG\Desktop\M0rgan.jpg:$CmdZnID [26]
  876. AlternateDataStreams: C:\Users\T-BAG\Desktop\M8LbL7Od7GMw9nJt2I4I7b1k3rSsgPWASZ1kAKdSpV2o6jB6SMLI4DMh8YZQb.exe:$CmdTcID [64]
  877. AlternateDataStreams: C:\Users\T-BAG\Desktop\mi31Gd3PCZ92XcoQtm1vn45vjlms7RYYVEqF85Jra0fPFTWAgwNMkGjje5ESo7Ii.exe:$CmdTcID [64]
  878. AlternateDataStreams: C:\Users\T-BAG\Desktop\Michael-Douglas-011.jpg:$CmdZnID [26]
  879. AlternateDataStreams: C:\Users\T-BAG\Desktop\mma_fedor_emelianenko1_576.jpg:$CmdZnID [26]
  880. AlternateDataStreams: C:\Users\T-BAG\Desktop\morgannnn.jpg:$CmdZnID [26]
  881. AlternateDataStreams: C:\Users\T-BAG\Desktop\NHSfrbh3vOZLdQU82LTrgJdLauVucXnTUS8Z2TsFsm60kk4BkFJ520Y5a86t7jMNY7nAJr6UPDwrD.exe:$CmdTcID [64]
  882. AlternateDataStreams: C:\Users\T-BAG\Desktop\PAKeTdwDIvEAPmAlgWv3TbdffTmJPwX9JQnto70IHpX5uwbldjtKGKBlUcv1nckIO7nvwDtZMdia4Zifo1cd3CowF2PC80Rb6Edo0dmQmJvaZXhsrG9m17FBEnfvlh.exe:$CmdTcID [64]
  883. AlternateDataStreams: C:\Users\T-BAG\Desktop\plasticsurgery.jpg:$CmdZnID [26]
  884. AlternateDataStreams: C:\Users\T-BAG\Desktop\program.exe:$CmdTcID [64]
  885. AlternateDataStreams: C:\Users\T-BAG\Desktop\program.exe:$CmdZnID [26]
  886. AlternateDataStreams: C:\Users\T-BAG\Desktop\ray-velcoro-true-detective.jpg:$CmdZnID [26]
  887. AlternateDataStreams: C:\Users\T-BAG\Desktop\ready.png:$CmdZnID [26]
  888. AlternateDataStreams: C:\Users\T-BAG\Desktop\render-servlet.gif:$CmdZnID [26]
  889. AlternateDataStreams: C:\Users\T-BAG\Desktop\RIP.jpg:$CmdZnID [26]
  890. AlternateDataStreams: C:\Users\T-BAG\Desktop\Robert-Knepper.jpg:$CmdZnID [26]
  891. AlternateDataStreams: C:\Users\T-BAG\Desktop\rover1.jpg:$CmdZnID [26]
  892. AlternateDataStreams: C:\Users\T-BAG\Desktop\Ruse-Cohle----hes-here-to-012.jpg:$CmdZnID [26]
  893. AlternateDataStreams: C:\Users\T-BAG\Desktop\rust.jpg:$CmdZnID [26]
  894. AlternateDataStreams: C:\Users\T-BAG\Desktop\Rustin_Cohle.jpg:$CmdZnID [26]
  895. AlternateDataStreams: C:\Users\T-BAG\Desktop\sicario-640x480.jpg:$CmdZnID [26]
  896. AlternateDataStreams: C:\Users\T-BAG\Desktop\Snowman Desmond.jpg:$CmdZnID [26]
  897. AlternateDataStreams: C:\Users\T-BAG\Desktop\spideyyyyyy.jpg:$CmdZnID [26]
  898. AlternateDataStreams: C:\Users\T-BAG\Desktop\stannis.jpg:$CmdZnID [26]
  899. AlternateDataStreams: C:\Users\T-BAG\Desktop\strike-team.jpg:$CmdZnID [26]
  900. AlternateDataStreams: C:\Users\T-BAG\Desktop\sw.jpg:$CmdZnID [26]
  901. AlternateDataStreams: C:\Users\T-BAG\Desktop\T-bagggggg.jpg:$CmdZnID [26]
  902. AlternateDataStreams: C:\Users\T-BAG\Desktop\TD-Poster.jpg:$CmdZnID [26]
  903. AlternateDataStreams: C:\Users\T-BAG\Desktop\the-shield.jpg:$CmdZnID [26]
  904. AlternateDataStreams: C:\Users\T-BAG\Desktop\the-walking-dead-season-6-cci-key-art-1600x720.jpg:$CmdZnID [26]
  905. AlternateDataStreams: C:\Users\T-BAG\Desktop\thecuriouscaseofbenjaminbutton.jpg:$CmdZnID [26]
  906. AlternateDataStreams: C:\Users\T-BAG\Desktop\the_revenant_.png:$CmdZnID [26]
  907. AlternateDataStreams: C:\Users\T-BAG\Desktop\true-detective-season-1.jpg:$CmdZnID [26]
  908. AlternateDataStreams: C:\Users\T-BAG\Desktop\twin-towers-2_1817913c1.jpg:$CmdZnID [26]
  909. AlternateDataStreams: C:\Users\T-BAG\Desktop\UNGRATEFUL APE.jpg:$CmdZnID [26]
  910. AlternateDataStreams: C:\Users\T-BAG\Desktop\Velcoro.gif:$CmdZnID [26]
  911. AlternateDataStreams: C:\Users\T-BAG\Desktop\vlcsnap-10684981.png:$CmdZnID [26]
  912. AlternateDataStreams: C:\Users\T-BAG\Desktop\walking-dead.jpg:$CmdZnID [26]
  913. AlternateDataStreams: C:\Users\T-BAG\Desktop\zzzzzzzzz.jpg:$CmdZnID [26]
  914. AlternateDataStreams: C:\Users\T-BAG\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe:$CmdTcID [64]
  915. AlternateDataStreams: C:\Users\T-BAG\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe:$CmdZnID [26]
  916. AlternateDataStreams: C:\Users\T-BAG\Downloads\13 - 18 Northern Heidel Quarry.rar:$CmdZnID [26]
  917. AlternateDataStreams: C:\Users\T-BAG\Downloads\1450399997915.jpg:$CmdZnID [26]
  918. AlternateDataStreams: C:\Users\T-BAG\Downloads\1451522840606.jpg:$CmdZnID [26]
  919. AlternateDataStreams: C:\Users\T-BAG\Downloads\3.9.1.133_20150210101242.exe:$CmdTcID [64]
  920. AlternateDataStreams: C:\Users\T-BAG\Downloads\353.06-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdTcID [64]
  921. AlternateDataStreams: C:\Users\T-BAG\Downloads\353.06-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdZnID [26]
  922. AlternateDataStreams: C:\Users\T-BAG\Downloads\358.50-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdTcID [64]
  923. AlternateDataStreams: C:\Users\T-BAG\Downloads\358.50-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdZnID [26]
  924. AlternateDataStreams: C:\Users\T-BAG\Downloads\361.75-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdZnID [26]
  925. AlternateDataStreams: C:\Users\T-BAG\Downloads\364.51-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdTcID [32]
  926. AlternateDataStreams: C:\Users\T-BAG\Downloads\364.51-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdZnID [26]
  927. AlternateDataStreams: C:\Users\T-BAG\Downloads\3DVideoPlayer_4.5.4-Setup (1).exe:$CmdTcID [64]
  928. AlternateDataStreams: C:\Users\T-BAG\Downloads\3DVideoPlayer_4.5.4-Setup.exe:$CmdTcID [64]
  929. AlternateDataStreams: C:\Users\T-BAG\Downloads\563e6b69de686_12189834_10207820648815127_9137598878436018181_n_jpgohe99b0a80ccd1805910fdc95cbf4687aeoe56C2EF7B.910f31ab492e882e528581623c46301a:$CmdZnID [26]
  930. AlternateDataStreams: C:\Users\T-BAG\Downloads\999F9EE9A7FAB310BC2F9C8031C31EADB1E424BE.torrent:$CmdZnID [26]
  931. AlternateDataStreams: C:\Users\T-BAG\Downloads\AbitSmarter_mpgh.net.zip:$CmdZnID [26]
  932. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC2510_Business_Management_Case_Study_April_12_2011.doc:$CmdZnID [26]
  933. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC2510_Business_Management_Exam_and_Answer.doc:$CmdZnID [26]
  934. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 Exam May Refer (1).docx:$CmdZnID [26]
  935. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 Exam May Refer (2).docx:$CmdZnID [26]
  936. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 Exam May Refer.docx:$CmdZnID [26]
  937. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 May 2015 Refer Exam Answers (1).docx:$CmdZnID [26]
  938. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 May 2015 Refer Exam Answers (2).docx:$CmdZnID [26]
  939. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 May 2015 Refer Exam Answers (3).docx:$CmdZnID [26]
  940. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4013 May 2015 Refer Exam Answers.docx:$CmdZnID [26]
  941. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017 (1).docx:$CmdZnID [26]
  942. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017HSupdated (1).docx:$CmdZnID [26]
  943. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017HSupdated.docx:$CmdZnID [26]
  944. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017_002_2013-14-T2-J_My_Glamour_Sage_Case_Study (1).doc:$CmdZnID [26]
  945. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017_002_2013-14-T2-J_My_Glamour_Sage_Case_Study.doc:$CmdZnID [26]
  946. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017_ABE_ Asst 1_Seminar_April 2016_issued (1).doc:$CmdZnID [26]
  947. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017_ABE_ Asst 1_Seminar_April 2016_issued.doc:$CmdZnID [26]
  948. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC4017_ABE_Module Guide_2015-16_draft.docx:$CmdZnID [26]
  949. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005 Employability Audit and Action Plan Students - Version 5 9 February 2015 (1).docx:$CmdZnID [26]
  950. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005 Employability Audit and Action Plan Students - Version 5 9 February 2015 (2).docx:$CmdZnID [26]
  951. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005 Employability Audit and Action Plan Students - Version 5 9 February 2015.docx:$CmdZnID [26]
  952. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005_APPLICATION_FORM.doc:$CmdZnID [26]
  953. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005_Assessment_1_Portfolio (1).docx:$CmdZnID [26]
  954. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5005_Assessment_1_Portfolio.docx:$CmdZnID [26]
  955. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5006 Assignment Feedback Sarwar 1401512.docx:$CmdZnID [26]
  956. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5006 Case Study Latest.docx:$CmdZnID [26]
  957. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5006_C.B.M._Assignment_1_2015_16 (1).docx:$CmdZnID [26]
  958. AlternateDataStreams: C:\Users\T-BAG\Downloads\ACC5006_C.B.M._Assignment_1_2015_16.docx:$CmdZnID [26]
  959. AlternateDataStreams: C:\Users\T-BAG\Downloads\Ace_Stream_Media_3.0.12_VLC_1.1.12.exe:$CmdTcID [64]
  960. AlternateDataStreams: C:\Users\T-BAG\Downloads\Ace_Stream_Media_3.1.2.exe:$CmdZnID [26]
  961. AlternateDataStreams: C:\Users\T-BAG\Downloads\AdwCleaner.exe:$CmdTcID [64]
  962. AlternateDataStreams: C:\Users\T-BAG\Downloads\AdwCleaner.exe:$CmdZnID [26]
  963. AlternateDataStreams: C:\Users\T-BAG\Downloads\Agency.docx:$CmdZnID [26]
  964. AlternateDataStreams: C:\Users\T-BAG\Downloads\Agency.pptx:$CmdZnID [26]
  965. AlternateDataStreams: C:\Users\T-BAG\Downloads\AION_GameforgeLiveSetup_EN.exe:$CmdTcID [64]
  966. AlternateDataStreams: C:\Users\T-BAG\Downloads\Amity.zip:$CmdZnID [26]
  967. AlternateDataStreams: C:\Users\T-BAG\Downloads\Answering Problem Questions (1).pptx:$CmdZnID [26]
  968. AlternateDataStreams: C:\Users\T-BAG\Downloads\Answering Problem Questions.pptx:$CmdZnID [26]
  969. AlternateDataStreams: C:\Users\T-BAG\Downloads\ArticGunZ_Installer_23052014(1).exe:$CmdTcID [64]
  970. AlternateDataStreams: C:\Users\T-BAG\Downloads\Assessment 2- Sage (1).doc:$CmdZnID [26]
  971. AlternateDataStreams: C:\Users\T-BAG\Downloads\Assessment 2- Sage (2).doc:$CmdZnID [26]
  972. AlternateDataStreams: C:\Users\T-BAG\Downloads\Assessment 2- Sage .doc:$CmdZnID [26]
  973. AlternateDataStreams: C:\Users\T-BAG\Downloads\Assignment:$CmdZnID [26]
  974. AlternateDataStreams: C:\Users\T-BAG\Downloads\assignment.docx:$CmdZnID [26]
  975. AlternateDataStreams: C:\Users\T-BAG\Downloads\AutoHotkey104805_Install.exe:$CmdTcID [64]
  976. AlternateDataStreams: C:\Users\T-BAG\Downloads\avidemux_2.6.10_win64.exe:$CmdTcID [64]
  977. AlternateDataStreams: C:\Users\T-BAG\Downloads\avidemux_2.6.10_win64.exe:$CmdZnID [26]
  978. AlternateDataStreams: C:\Users\T-BAG\Downloads\Batman_v_Superman_Dawn_of_Justice_(Deluxe)_(2016)_[320].zip:$CmdZnID [26]
  979. AlternateDataStreams: C:\Users\T-BAG\Downloads\Battle.net-Setup (1).exe:$CmdTcID [64]
  980. AlternateDataStreams: C:\Users\T-BAG\Downloads\Battle.net-Setup (1).exe:$CmdZnID [26]
  981. AlternateDataStreams: C:\Users\T-BAG\Downloads\Battle.net-Setup.exe:$CmdTcID [64]
  982. AlternateDataStreams: C:\Users\T-BAG\Downloads\Battle.net-Setup.exe:$CmdZnID [26]
  983. AlternateDataStreams: C:\Users\T-BAG\Downloads\bdo-englishplease_setup.exe:$CmdTcID [130]
  984. AlternateDataStreams: C:\Users\T-BAG\Downloads\bdo-englishplease_setup.exe:$CmdZnID [26]
  985. AlternateDataStreams: C:\Users\T-BAG\Downloads\BDOTA_v0.1.0.2.exe:$CmdTcID [64]
  986. AlternateDataStreams: C:\Users\T-BAG\Downloads\BDOTA_v0.1.0.2.exe:$CmdZnID [26]
  987. AlternateDataStreams: C:\Users\T-BAG\Downloads\BDOViperRelease2.1.5.1.zip:$CmdZnID [26]
  988. AlternateDataStreams: C:\Users\T-BAG\Downloads\Better Fishing v0.7g BETA.zip:$CmdZnID [26]
  989. AlternateDataStreams: C:\Users\T-BAG\Downloads\BitTorrent.exe:$CmdTcID [64]
  990. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesert64.rar:$CmdZnID [26]
  991. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineCCMSetup_2016012602.exe:$CmdTcID [64]
  992. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineCCMSetup_2016012602.exe:$CmdZnID [26]
  993. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineInstall_10019.exe:$CmdTcID [64]
  994. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineInstall_10019.exe:$CmdZnID [26]
  995. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineInstall_10020.exe:$CmdTcID [64]
  996. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineInstall_10020.exe:$CmdZnID [26]
  997. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineSetup_20160216_1001 (1).exe:$CmdTcID [64]
  998. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineSetup_20160216_1001 (1).exe:$CmdZnID [26]
  999. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineSetup_20160216_1001.exe:$CmdTcID [64]
  1000. AlternateDataStreams: C:\Users\T-BAG\Downloads\BlackDesertOnlineSetup_20160216_1001.exe:$CmdZnID [26]
  1001. AlternateDataStreams: C:\Users\T-BAG\Downloads\Business_Management_Case_Study_Firebridge_Tyres.docx:$CmdZnID [26]
  1002. AlternateDataStreams: C:\Users\T-BAG\Downloads\Business_Process_Re-Engineering.docx:$CmdZnID [26]
  1003. AlternateDataStreams: C:\Users\T-BAG\Downloads\ccsetup512.exe:$CmdTcID [64]
  1004. AlternateDataStreams: C:\Users\T-BAG\Downloads\ccsetup512.exe:$CmdZnID [26]
  1005. AlternateDataStreams: C:\Users\T-BAG\Downloads\cheatleak_mpgh.net.rar:$CmdZnID [26]
  1006. AlternateDataStreams: C:\Users\T-BAG\Downloads\ChromeSetup (1).exe:$CmdTcID [64]
  1007. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN_[001]_Aylius_2015-06-19_21-14-16_Mandolina.gzr:$CmdTcID [64]
  1008. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN_[001]_Aylius_2015-06-19_21-14-16_Mandolina.gzr:$CmdZnID [26]
  1009. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN_[002]_ShudaHadAv8_2015-06-22_18-56-48_WhiteIce.gzr:$CmdZnID [26]
  1010. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN_[006]_Aylius_2015-06-19_21-17-17_Mandolina.gzr:$CmdZnID [26]
  1011. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN__Cashual_20150530_143123_Children.gzr:$CmdTcID [130]
  1012. AlternateDataStreams: C:\Users\T-BAG\Downloads\CLAN__Dizaster_20150530_155523_Children.gzr:$CmdTcID [64]
  1013. AlternateDataStreams: C:\Users\T-BAG\Downloads\ComplX Multihack v0.7.4_mpgh.net (1).zip:$CmdZnID [26]
  1014. AlternateDataStreams: C:\Users\T-BAG\Downloads\ComplX Multihack v0.7.4_mpgh.net.zip:$CmdZnID [26]
  1015. AlternateDataStreams: C:\Users\T-BAG\Downloads\Contract Law.docx:$CmdZnID [26]
  1016. AlternateDataStreams: C:\Users\T-BAG\Downloads\Contract_of_Employment_and_Vicarious_Liability.docx:$CmdZnID [26]
  1017. AlternateDataStreams: C:\Users\T-BAG\Downloads\Correlation and Linear regression revision (1).pptx:$CmdZnID [26]
  1018. AlternateDataStreams: C:\Users\T-BAG\Downloads\Correlation and Linear regression revision.pptx:$CmdZnID [26]
  1019. AlternateDataStreams: C:\Users\T-BAG\Downloads\covering letter (1).docx:$CmdZnID [26]
  1020. AlternateDataStreams: C:\Users\T-BAG\Downloads\covering letter.docx:$CmdZnID [26]
  1021. AlternateDataStreams: C:\Users\T-BAG\Downloads\Curriculum Vitae (1).docx:$CmdZnID [26]
  1022. AlternateDataStreams: C:\Users\T-BAG\Downloads\Curriculum Vitae.docx:$CmdZnID [26]
  1023. AlternateDataStreams: C:\Users\T-BAG\Downloads\DAMN IT 1.4_mpgh.net.zip:$CmdZnID [26]
  1024. AlternateDataStreams: C:\Users\T-BAG\Downloads\deluge-1.3.12-1-win32-py2.6-setup.exe:$CmdZnID [26]
  1025. AlternateDataStreams: C:\Users\T-BAG\Downloads\Discharge of Contract.pptx:$CmdZnID [26]
  1026. AlternateDataStreams: C:\Users\T-BAG\Downloads\discharge of Contracts.doc:$CmdZnID [26]
  1027. AlternateDataStreams: C:\Users\T-BAG\Downloads\DiscordSetup.exe:$CmdZnID [26]
  1028. AlternateDataStreams: C:\Users\T-BAG\Downloads\DMT[001]_Elicar_2015-07-09_18-48-36.gzr:$CmdZnID [26]
  1029. AlternateDataStreams: C:\Users\T-BAG\Downloads\DMT[001]_Elicar_2015-07-09_18-49-48.gzr:$CmdZnID [26]
  1030. AlternateDataStreams: C:\Users\T-BAG\Downloads\DMT[013]_Elicar_2015-07-09_18-55-24.gzr:$CmdZnID [26]
  1031. AlternateDataStreams: C:\Users\T-BAG\Downloads\DMT[014]_Elicar_2015-07-09_18-56-12.gzr:$CmdZnID [26]
  1032. AlternateDataStreams: C:\Users\T-BAG\Downloads\Drastic1.jpg:$CmdZnID [26]
  1033. AlternateDataStreams: C:\Users\T-BAG\Downloads\Drastic1111111111111.jpg:$CmdZnID [26]
  1034. AlternateDataStreams: C:\Users\T-BAG\Downloads\DrvRadarPro_Setup.exe:$CmdTcID [32]
  1035. AlternateDataStreams: C:\Users\T-BAG\Downloads\DrvRadarPro_Setup.exe:$CmdZnID [26]
  1036. AlternateDataStreams: C:\Users\T-BAG\Downloads\drw_trial.exe:$CmdTcID [64]
  1037. AlternateDataStreams: C:\Users\T-BAG\Downloads\DUEL_Sunfire_2015-08-04_14-49-30.gzr:$CmdTcID [64]
  1038. AlternateDataStreams: C:\Users\T-BAG\Downloads\DUEL_Sunfire_2015-08-04_14-49-30.gzr:$CmdZnID [26]
  1039. AlternateDataStreams: C:\Users\T-BAG\Downloads\DUEL_Sunfire_2015-08-04_14-51-19.gzr:$CmdZnID [26]
  1040. AlternateDataStreams: C:\Users\T-BAG\Downloads\EagleGunz1.5_v3.exe:$CmdTcID [64]
  1041. AlternateDataStreams: C:\Users\T-BAG\Downloads\EagleGunz1.5_v3.exe:$CmdZnID [26]
  1042. AlternateDataStreams: C:\Users\T-BAG\Downloads\Economics submission.pdf:$CmdZnID [26]
  1043. AlternateDataStreams: C:\Users\T-BAG\Downloads\Employers Liability.pptx:$CmdZnID [26]
  1044. AlternateDataStreams: C:\Users\T-BAG\Downloads\Employment law.pptx:$CmdZnID [26]
  1045. AlternateDataStreams: C:\Users\T-BAG\Downloads\EmsisoftEmergencyKit.exe:$CmdTcID [64]
  1046. AlternateDataStreams: C:\Users\T-BAG\Downloads\esetsmartinstaller_enu.exe:$CmdTcID [64]
  1047. AlternateDataStreams: C:\Users\T-BAG\Downloads\Ev0 R8 HotFix Edition_mpgh.net_mpgh.net (1).rar:$CmdZnID [26]
  1048. AlternateDataStreams: C:\Users\T-BAG\Downloads\Ev0 R8 HotFix Edition_mpgh.net_mpgh.net.rar:$CmdZnID [26]
  1049. AlternateDataStreams: C:\Users\T-BAG\Downloads\Exam Case study scenario - ILA (1).docx:$CmdZnID [26]
  1050. AlternateDataStreams: C:\Users\T-BAG\Downloads\Exam Case study scenario - ILA (2).docx:$CmdZnID [26]
  1051. AlternateDataStreams: C:\Users\T-BAG\Downloads\Exam Case study scenario - ILA.docx:$CmdZnID [26]
  1052. AlternateDataStreams: C:\Users\T-BAG\Downloads\Exam_May_Refer_2013.14_FAF.doc:$CmdZnID [26]
  1053. AlternateDataStreams: C:\Users\T-BAG\Downloads\FirefoxPortable_35.0.1_English.paf.exe:$CmdTcID [64]
  1054. AlternateDataStreams: C:\Users\T-BAG\Downloads\FreestyleGunZ.rar:$CmdZnID [26]
  1055. AlternateDataStreams: C:\Users\T-BAG\Downloads\friday assignment.docx:$CmdZnID [26]
  1056. AlternateDataStreams: C:\Users\T-BAG\Downloads\FRST64.exe:$CmdZnID [26]
  1057. AlternateDataStreams: C:\Users\T-BAG\Downloads\GeForce_Experience_v2.11.2.46.exe:$CmdTcID [32]
  1058. AlternateDataStreams: C:\Users\T-BAG\Downloads\GeForce_Experience_v2.11.2.46.exe:$CmdZnID [26]
  1059. AlternateDataStreams: C:\Users\T-BAG\Downloads\giphy.gif:$CmdZnID [26]
  1060. AlternateDataStreams: C:\Users\T-BAG\Downloads\glowesp_mpgh.net.rar:$CmdZnID [26]
  1061. AlternateDataStreams: C:\Users\T-BAG\Downloads\Greenshot-INSTALLER-1.2.6.7-RELEASE.exe:$CmdTcID [64]
  1062. AlternateDataStreams: C:\Users\T-BAG\Downloads\Greenshot-INSTALLER-1.2.6.7-RELEASE.exe:$CmdZnID [26]
  1063. AlternateDataStreams: C:\Users\T-BAG\Downloads\HardDiskSerialNumberChanger.exe:$CmdTcID [64]
  1064. AlternateDataStreams: C:\Users\T-BAG\Downloads\HardDiskSerialNumberChanger.exe:$CmdZnID [26]
  1065. AlternateDataStreams: C:\Users\T-BAG\Downloads\Helms BETA 2.3.zip:$CmdZnID [26]
  1066. AlternateDataStreams: C:\Users\T-BAG\Downloads\Hexe Sanctuary Patrol Brpate.zip:$CmdZnID [26]
  1067. AlternateDataStreams: C:\Users\T-BAG\Downloads\Hola-Setup-x64-1.8.328.exe:$CmdTcID [130]
  1068. AlternateDataStreams: C:\Users\T-BAG\Downloads\Hola-Setup-x64-1.8.328.exe:$CmdZnID [26]
  1069. AlternateDataStreams: C:\Users\T-BAG\Downloads\HSS-5.1.3-install-plain-773-plain.exe:$CmdTcID [64]
  1070. AlternateDataStreams: C:\Users\T-BAG\Downloads\HSS-5.1.3-install-plain-773-plain.exe:$CmdZnID [26]
  1071. AlternateDataStreams: C:\Users\T-BAG\Downloads\icq_rfrset.exe:$CmdTcID [64]
  1072. AlternateDataStreams: C:\Users\T-BAG\Downloads\IE11-Windows6.1.exe:$CmdZnID [26]
  1073. AlternateDataStreams: C:\Users\T-BAG\Downloads\illsbury_Ranger_-_EES_Spam.zip:$CmdZnID [26]
  1074. AlternateDataStreams: C:\Users\T-BAG\Downloads\IMG_0097.JPG:$CmdTcID [64]
  1075. AlternateDataStreams: C:\Users\T-BAG\Downloads\IMG_0097.JPG:$CmdZnID [26]
  1076. AlternateDataStreams: C:\Users\T-BAG\Downloads\isoplex-setup-1.0.4.exe:$CmdTcID [64]
  1077. AlternateDataStreams: C:\Users\T-BAG\Downloads\JRT (1).exe:$CmdZnID [26]
  1078. AlternateDataStreams: C:\Users\T-BAG\Downloads\KCP-0.5.9.8_[3F4F9CB8].exe:$CmdTcID [64]
  1079. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe:$CmdTcID [64]
  1080. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe:$CmdZnID [26]
  1081. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update (1).exe:$CmdTcID [130]
  1082. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update (2).exe:$CmdTcID [64]
  1083. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update(1).exe:$CmdTcID [64]
  1084. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update(2).exe:$CmdTcID [64]
  1085. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update-2.0.14.15.exe:$CmdTcID [64]
  1086. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update-2.0.14.15.exe:$CmdZnID [26]
  1087. AlternateDataStreams: C:\Users\T-BAG\Downloads\LeagueSharp-update.exe:$CmdTcID [64]
  1088. AlternateDataStreams: C:\Users\T-BAG\Downloads\libscout.zip:$CmdZnID [26]
  1089. AlternateDataStreams: C:\Users\T-BAG\Downloads\Loader (1).exe:$CmdTcID [32]
  1090. AlternateDataStreams: C:\Users\T-BAG\Downloads\Loader (1).exe:$CmdZnID [26]
  1091. AlternateDataStreams: C:\Users\T-BAG\Downloads\Loader.exe:$CmdTcID [32]
  1092. AlternateDataStreams: C:\Users\T-BAG\Downloads\Loader.exe:$CmdZnID [26]
  1093. AlternateDataStreams: C:\Users\T-BAG\Downloads\lost.jpg:$CmdZnID [26]
  1094. AlternateDataStreams: C:\Users\T-BAG\Downloads\lpp(1).docx:$CmdTcID [64]
  1095. AlternateDataStreams: C:\Users\T-BAG\Downloads\lpp(1).docx:$CmdZnID [26]
  1096. AlternateDataStreams: C:\Users\T-BAG\Downloads\lpp.docx:$CmdZnID [26]
  1097. AlternateDataStreams: C:\Users\T-BAG\Downloads\mbam-setup-2.0.4.1028.exe:$CmdTcID [64]
  1098. AlternateDataStreams: C:\Users\T-BAG\Downloads\mbam-setup-2.1.6.1022.exe:$CmdTcID [130]
  1099. AlternateDataStreams: C:\Users\T-BAG\Downloads\Medical report (1).doc:$CmdZnID [26]
  1100. AlternateDataStreams: C:\Users\T-BAG\Downloads\Medical report.doc:$CmdZnID [26]
  1101. AlternateDataStreams: C:\Users\T-BAG\Downloads\MEGAsyncSetup.exe:$CmdTcID [64]
  1102. AlternateDataStreams: C:\Users\T-BAG\Downloads\MEGAsyncSetup.exe:$CmdZnID [26]
  1103. AlternateDataStreams: C:\Users\T-BAG\Downloads\Module Number.docx:$CmdZnID [26]
  1104. AlternateDataStreams: C:\Users\T-BAG\Downloads\NDP451-KB2858728-x86-x64-AllOS-ENU.exe:$CmdTcID [32]
  1105. AlternateDataStreams: C:\Users\T-BAG\Downloads\NDP451-KB2858728-x86-x64-AllOS-ENU.exe:$CmdZnID [26]
  1106. AlternateDataStreams: C:\Users\T-BAG\Downloads\NDP452-KB2901954-Web.exe:$CmdTcID [64]
  1107. AlternateDataStreams: C:\Users\T-BAG\Downloads\Nexus Mod Manager-0.52.3.exe:$CmdTcID [64]
  1108. AlternateDataStreams: C:\Users\T-BAG\Downloads\OriginThinSetup.exe:$CmdTcID [64]
  1109. AlternateDataStreams: C:\Users\T-BAG\Downloads\OriginThinSetup.exe:$CmdZnID [26]
  1110. AlternateDataStreams: C:\Users\T-BAG\Downloads\PatrolAreas_AL_3540.zip:$CmdZnID [26]
  1111. AlternateDataStreams: C:\Users\T-BAG\Downloads\pdr7free.exe:$CmdTcID [64]
  1112. AlternateDataStreams: C:\Users\T-BAG\Downloads\pdr7free.exe:$CmdZnID [26]
  1113. AlternateDataStreams: C:\Users\T-BAG\Downloads\PerfectUninstaller_Setup.exe:$CmdTcID [64]
  1114. AlternateDataStreams: C:\Users\T-BAG\Downloads\PerfectUninstaller_Setup.exe:$CmdZnID [26]
  1115. AlternateDataStreams: C:\Users\T-BAG\Downloads\personal_tutorialAvoiding_Plagiarism.pptx:$CmdZnID [26]
  1116. AlternateDataStreams: C:\Users\T-BAG\Downloads\personal_tutoRIALSPPT_Using_Turnitin_Sept_2013_ACC_Final.ppt:$CmdZnID [26]
  1117. AlternateDataStreams: C:\Users\T-BAG\Downloads\pidgin-2.10.11.exe:$CmdTcID [64]
  1118. AlternateDataStreams: C:\Users\T-BAG\Downloads\pidgin-otr-4.0.1.exe:$CmdTcID [64]
  1119. AlternateDataStreams: C:\Users\T-BAG\Downloads\PlayBlackDesert.exe:$CmdZnID [26]
  1120. AlternateDataStreams: C:\Users\T-BAG\Downloads\PolyESP_mpgh.net.zip:$CmdZnID [26]
  1121. AlternateDataStreams: C:\Users\T-BAG\Downloads\program_mpgh.net (1).rar:$CmdZnID [26]
  1122. AlternateDataStreams: C:\Users\T-BAG\Downloads\program_mpgh.net.rar:$CmdZnID [26]
  1123. AlternateDataStreams: C:\Users\T-BAG\Downloads\ProxifierSetup.exe:$CmdTcID [64]
  1124. AlternateDataStreams: C:\Users\T-BAG\Downloads\psi-0.14-win-setup.exe:$CmdTcID [64]
  1125. AlternateDataStreams: C:\Users\T-BAG\Downloads\psi-0.15-win64-setup.exe:$CmdTcID [64]
  1126. AlternateDataStreams: C:\Users\T-BAG\Downloads\qbittorrent_3.3.5_setup.exe:$CmdZnID [26]
  1127. AlternateDataStreams: C:\Users\T-BAG\Downloads\Razer_Synapse_Framework_V1.18.19.23944.exe:$CmdTcID [64]
  1128. AlternateDataStreams: C:\Users\T-BAG\Downloads\rcsetup152.exe:$CmdTcID [64]
  1129. AlternateDataStreams: C:\Users\T-BAG\Downloads\RegSeeker2.57.zip:$CmdZnID [26]
  1130. AlternateDataStreams: C:\Users\T-BAG\Downloads\render-servlet.gif:$CmdZnID [26]
  1131. AlternateDataStreams: C:\Users\T-BAG\Downloads\report sage (1).doc:$CmdZnID [26]
  1132. AlternateDataStreams: C:\Users\T-BAG\Downloads\report sage.doc:$CmdZnID [26]
  1133. AlternateDataStreams: C:\Users\T-BAG\Downloads\Rhutum Brpate.zip:$CmdZnID [26]
  1134. AlternateDataStreams: C:\Users\T-BAG\Downloads\RogueKiller (1).exe:$CmdTcID [64]
  1135. AlternateDataStreams: C:\Users\T-BAG\Downloads\RogueKiller (1).exe:$CmdZnID [26]
  1136. AlternateDataStreams: C:\Users\T-BAG\Downloads\RogueKiller.exe:$CmdTcID [64]
  1137. AlternateDataStreams: C:\Users\T-BAG\Downloads\SafariSetup.exe:$CmdTcID [64]
  1138. AlternateDataStreams: C:\Users\T-BAG\Downloads\SafariSetup.exe:$CmdZnID [26]
  1139. AlternateDataStreams: C:\Users\T-BAG\Downloads\sage-2016-01-18.zip:$CmdZnID [26]
  1140. AlternateDataStreams: C:\Users\T-BAG\Downloads\SandboxieInstall.exe:$CmdTcID [64]
  1141. AlternateDataStreams: C:\Users\T-BAG\Downloads\scanned-Sarwar%2c Hamza-20160513162252.pdf:$CmdZnID [26]
  1142. AlternateDataStreams: C:\Users\T-BAG\Downloads\scanned-Sarwar%2c Hamza-20160513162411.pdf:$CmdZnID [26]
  1143. AlternateDataStreams: C:\Users\T-BAG\Downloads\Seminar Answer.pdf:$CmdZnID [26]
  1144. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (1).exe:$CmdTcID [64]
  1145. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (1).exe:$CmdZnID [26]
  1146. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (2).exe:$CmdTcID [64]
  1147. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (2).exe:$CmdZnID [26]
  1148. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (3).exe:$CmdTcID [64]
  1149. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (3).exe:$CmdZnID [26]
  1150. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (4).exe:$CmdTcID [130]
  1151. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (4).exe:$CmdZnID [26]
  1152. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (5).exe:$CmdTcID [130]
  1153. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (5).exe:$CmdZnID [26]
  1154. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (6).exe:$CmdTcID [64]
  1155. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (6).exe:$CmdZnID [26]
  1156. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (7).exe:$CmdTcID [64]
  1157. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup (7).exe:$CmdZnID [26]
  1158. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup.exe:$CmdTcID [64]
  1159. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup.exe:$CmdZnID [26]
  1160. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_galaxy_1.0.2.958.exe:$CmdTcID [64]
  1161. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_galaxy_1.0.2.958.exe:$CmdZnID [26]
  1162. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_the_witcher_3_wild_hunt_2.0.0.28(1).exe:$CmdTcID [64]
  1163. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_the_witcher_3_wild_hunt_2.0.0.28(1).exe:$CmdZnID [26]
  1164. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_the_witcher_3_wild_hunt_2.0.0.28.exe:$CmdTcID [64]
  1165. AlternateDataStreams: C:\Users\T-BAG\Downloads\setup_the_witcher_3_wild_hunt_2.0.0.28.exe:$CmdZnID [26]
  1166. AlternateDataStreams: C:\Users\T-BAG\Downloads\SE_mpgh.net (1).rar:$CmdZnID [26]
  1167. AlternateDataStreams: C:\Users\T-BAG\Downloads\SE_mpgh.net (2).rar:$CmdZnID [26]
  1168. AlternateDataStreams: C:\Users\T-BAG\Downloads\SE_mpgh.net.rar:$CmdZnID [26]
  1169. AlternateDataStreams: C:\Users\T-BAG\Downloads\Silverlight_x64(1).exe:$CmdTcID [64]
  1170. AlternateDataStreams: C:\Users\T-BAG\Downloads\Silverlight_x64.exe:$CmdTcID [64]
  1171. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeSetup(2).exe:$CmdZnID [26]
  1172. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeSetup.exe:$CmdTcID [64]
  1173. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeSetupFull(1).exe:$CmdTcID [64]
  1174. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeSetupFull(2).exe:$CmdTcID [64]
  1175. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeSetupFull.exe:$CmdTcID [64]
  1176. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeWebPlugin-3.2.0.23388.msi:$CmdTcID [130]
  1177. AlternateDataStreams: C:\Users\T-BAG\Downloads\SkypeWebPlugin.msi:$CmdTcID [64]
  1178. AlternateDataStreams: C:\Users\T-BAG\Downloads\smac20_setup.exe:$CmdTcID [64]
  1179. AlternateDataStreams: C:\Users\T-BAG\Downloads\smac20_setup.exe:$CmdZnID [26]
  1180. AlternateDataStreams: C:\Users\T-BAG\Downloads\SmartflixSetup(1).exe:$CmdZnID [26]
  1181. AlternateDataStreams: C:\Users\T-BAG\Downloads\SmartflixSetup.exe:$CmdTcID [64]
  1182. AlternateDataStreams: C:\Users\T-BAG\Downloads\SmartflixSetup.exe:$CmdZnID [26]
  1183. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sniper.zip:$CmdZnID [26]
  1184. AlternateDataStreams: C:\Users\T-BAG\Downloads\Statement 30-NOV-15 AC 00770493.PDF:$CmdZnID [26]
  1185. AlternateDataStreams: C:\Users\T-BAG\Downloads\Statement 30-OCT-15 AC 00770493.PDF:$CmdZnID [26]
  1186. AlternateDataStreams: C:\Users\T-BAG\Downloads\Streaming-0.6.1-py2.7.egg:$CmdZnID [26]
  1187. AlternateDataStreams: C:\Users\T-BAG\Downloads\SwitchVPN.msi:$CmdTcID [64]
  1188. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik Ranger - Sykotik.rar:$CmdZnID [26]
  1189. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik Wizard.rar:$CmdZnID [26]
  1190. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik_GrinderV2.6.zip:$CmdZnID [26]
  1191. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik_GrinderV2.7 (1).zip:$CmdZnID [26]
  1192. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik_GrinderV2.7.zip:$CmdZnID [26]
  1193. AlternateDataStreams: C:\Users\T-BAG\Downloads\Sykotik_Ranger_-_Intermediate (2).zip:$CmdZnID [26]
  1194. AlternateDataStreams: C:\Users\T-BAG\Downloads\TaskManagerFix.exe:$CmdZnID [26]
  1195. AlternateDataStreams: C:\Users\T-BAG\Downloads\TCPView.zip:$CmdZnID [26]
  1196. AlternateDataStreams: C:\Users\T-BAG\Downloads\tdsskiller (1).exe:$CmdTcID [64]
  1197. AlternateDataStreams: C:\Users\T-BAG\Downloads\tdsskiller (1).exe:$CmdZnID [26]
  1198. AlternateDataStreams: C:\Users\T-BAG\Downloads\tdsskiller.exe:$CmdTcID [64]
  1199. AlternateDataStreams: C:\Users\T-BAG\Downloads\TeamSpeak3-Client-win64-3.0.16.exe:$CmdTcID [64]
  1200. AlternateDataStreams: C:\Users\T-BAG\Downloads\TeamViewer_Setup_en-hys(1).exe:$CmdTcID [64]
  1201. AlternateDataStreams: C:\Users\T-BAG\Downloads\TeamViewer_Setup_en-hys.exe:$CmdTcID [64]
  1202. AlternateDataStreams: C:\Users\T-BAG\Downloads\Termination of Employment.docx:$CmdZnID [26]
  1203. AlternateDataStreams: C:\Users\T-BAG\Downloads\TERMS OF A CONTRACT.docx:$CmdZnID [26]
  1204. AlternateDataStreams: C:\Users\T-BAG\Downloads\thumbnail_render-servlet.jpg:$CmdZnID [26]
  1205. AlternateDataStreams: C:\Users\T-BAG\Downloads\TMACv6.0.7_Setup (1).zip:$CmdZnID [26]
  1206. AlternateDataStreams: C:\Users\T-BAG\Downloads\TMACv6.0.7_Setup.zip:$CmdZnID [26]
  1207. AlternateDataStreams: C:\Users\T-BAG\Downloads\TOE Team Letter to Borr enc initial non 1-2 pack.PDF:$CmdZnID [26]
  1208. AlternateDataStreams: C:\Users\T-BAG\Downloads\torbrowser-install-4.0.2_en-US.exe:$CmdTcID [64]
  1209. AlternateDataStreams: C:\Users\T-BAG\Downloads\torbrowser-install-5.0.6_en-US.exe:$CmdZnID [26]
  1210. AlternateDataStreams: C:\Users\T-BAG\Downloads\TorchSetup-r20-n-bc.exe:$CmdTcID [64]
  1211. AlternateDataStreams: C:\Users\T-BAG\Downloads\TorchSetup-r20-n-bc.exe:$CmdZnID [26]
  1212. AlternateDataStreams: C:\Users\T-BAG\Downloads\torrentsTime-download.exe:$CmdZnID [26]
  1213. AlternateDataStreams: C:\Users\T-BAG\Downloads\Tort Law.docx:$CmdZnID [26]
  1214. AlternateDataStreams: C:\Users\T-BAG\Downloads\Transmission-Qt-2.84.4-x86_32-installer.exe:$CmdTcID [64]
  1215. AlternateDataStreams: C:\Users\T-BAG\Downloads\Transmission-Qt-2.84.4-x86_32-installer.exe:$CmdZnID [26]
  1216. AlternateDataStreams: C:\Users\T-BAG\Downloads\Treants BETA.zip:$CmdZnID [26]
  1217. AlternateDataStreams: C:\Users\T-BAG\Downloads\TrentCaveElite.rar:$CmdZnID [26]
  1218. AlternateDataStreams: C:\Users\T-BAG\Downloads\undelete-360-setup.exe:$CmdTcID [64]
  1219. AlternateDataStreams: C:\Users\T-BAG\Downloads\UnknownPortal.exe:$CmdTcID [64]
  1220. AlternateDataStreams: C:\Users\T-BAG\Downloads\UnknownPortal.exe:$CmdZnID [26]
  1221. AlternateDataStreams: C:\Users\T-BAG\Downloads\v5final.rar:$CmdZnID [26]
  1222. AlternateDataStreams: C:\Users\T-BAG\Downloads\Valkyrie 13 - 44.zip:$CmdZnID [26]
  1223. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64 (1).exe:$CmdTcID [64]
  1224. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64 (1).exe:$CmdZnID [26]
  1225. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64 (2).exe:$CmdTcID [32]
  1226. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64 (2).exe:$CmdZnID [26]
  1227. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64.exe:$CmdTcID [64]
  1228. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x64.exe:$CmdZnID [26]
  1229. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x86.exe:$CmdTcID [130]
  1230. AlternateDataStreams: C:\Users\T-BAG\Downloads\vc_redist.x86.exe:$CmdZnID [26]
  1231. AlternateDataStreams: C:\Users\T-BAG\Downloads\VirtualDub-1.10.4.zip:$CmdZnID [26]
  1232. AlternateDataStreams: C:\Users\T-BAG\Downloads\VirtualdubFFMpegPlugin_1832.zip:$CmdTcID [64]
  1233. AlternateDataStreams: C:\Users\T-BAG\Downloads\VirtualdubFFMpegPlugin_1832.zip:$CmdZnID [26]
  1234. AlternateDataStreams: C:\Users\T-BAG\Downloads\vlc-2.2.4-win32.exe:$CmdZnID [26]
  1235. AlternateDataStreams: C:\Users\T-BAG\Downloads\volumeid (2).zip:$CmdZnID [26]
  1236. AlternateDataStreams: C:\Users\T-BAG\Downloads\volumeid.zip:$CmdZnID [26]
  1237. AlternateDataStreams: C:\Users\T-BAG\Downloads\WatchoverTyrant 1.1.3.5 (1).zip:$CmdZnID [26]
  1238. AlternateDataStreams: C:\Users\T-BAG\Downloads\WatchoverTyrant 1.1.3.5 (2).zip:$CmdZnID [26]
  1239. AlternateDataStreams: C:\Users\T-BAG\Downloads\WatchoverTyrant 1.1.3.5 (3).zip:$CmdZnID [26]
  1240. AlternateDataStreams: C:\Users\T-BAG\Downloads\WatchoverTyrant 1.1.3.5 (4).zip:$CmdZnID [26]
  1241. AlternateDataStreams: C:\Users\T-BAG\Downloads\WatchoverTyrant 1.1.3.5.zip:$CmdZnID [26]
  1242. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week 14 Revision Answer (1).xlsx:$CmdZnID [26]
  1243. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week 14 Revision Answer.xlsx:$CmdZnID [26]
  1244. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week 14 Revision Question - Suspense.docx:$CmdZnID [26]
  1245. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_10_Partnerships.pptx:$CmdZnID [26]
  1246. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_11_Answers.doc:$CmdZnID [26]
  1247. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_11_Partnerships_Questions.docx:$CmdZnID [26]
  1248. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_6_Tutorial_Questions.docx:$CmdZnID [26]
  1249. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_7_Slides_Accruals_and_Prepayments_2_.pptx:$CmdZnID [26]
  1250. AlternateDataStreams: C:\Users\T-BAG\Downloads\Week_7_Slides_Bad_Debts_Doubtful_Debts_and_Discounts_1_.pptx:$CmdZnID [26]
  1251. AlternateDataStreams: C:\Users\T-BAG\Downloads\Windows6.1-KB2670838-x64.msu:$CmdZnID [26]
  1252. AlternateDataStreams: C:\Users\T-BAG\Downloads\winscp570setup.exe:$CmdTcID [64]
  1253. AlternateDataStreams: C:\Users\T-BAG\Downloads\Wireshark-win64-1.12.4.exe:$CmdTcID [64]
  1254. AlternateDataStreams: C:\Users\T-BAG\Downloads\wlsetup-web.exe:$CmdTcID [32]
  1255. AlternateDataStreams: C:\Users\T-BAG\Downloads\wlsetup-web.exe:$CmdZnID [26]
  1256. AlternateDataStreams: C:\Users\T-BAG\Downloads\WTFastSetup.3.5.9.511.exe:$CmdZnID [26]
  1257. AlternateDataStreams: C:\Users\T-BAG\Downloads\Xvid-1.3.2-20110601.exe:$CmdTcID [64]
  1258. AlternateDataStreams: C:\Users\T-BAG\Downloads\Xvid-1.3.2-20110601.exe:$CmdZnID [26]
  1259. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr.prx.websiteproxy.co.uk.prx.websiteproxy.co.uk]batman.v.superman.dawn.of.justice.2016.ultimate.edition.1080p.web.dl.dd5.1.h264.rarbg (1).torrent:$CmdZnID [26]
  1260. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr.prx.websiteproxy.co.uk.prx.websiteproxy.co.uk]batman.v.superman.dawn.of.justice.2016.ultimate.edition.1080p.web.dl.dd5.1.h264.rarbg.torrent:$CmdZnID [26]
  1261. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]black.sails.s03e04.xxii.720p.stz.webrip.aac2.0.x264.ntb.rartv.torrent:$CmdZnID [26]
  1262. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]black.sails.s03e06.xxiv.720p.stz.webrip.aac2.0.x264.ntb.rartv.torrent:$CmdZnID [26]
  1263. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]captain.america.civil.war.2016.hd.tc.x264.ac3.cpg.torrent:$CmdZnID [26]
  1264. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]deadpool.2016.hdts.x264.readnfo.exclusive.torrent:$CmdZnID [26]
  1265. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]deadpool.2016.new.hd.telesync.v2.x264.cpg.torrent:$CmdZnID [26]
  1266. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e01.720p.hdtv.x264.sva.rartv (1).torrent:$CmdZnID [26]
  1267. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e01.720p.hdtv.x264.sva.rartv.torrent:$CmdZnID [26]
  1268. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e03.720p.hdtv.x264.avs.rartv.torrent:$CmdZnID [26]
  1269. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e04.720p.hdtv.x264.avs.rartv.torrent:$CmdZnID [26]
  1270. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e05.1080p.leaked.webrip.hevc.2ch.x265.1080p.hevc.torrent:$CmdZnID [26]
  1271. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e05.the.door.1080p.x264.sammy.hq.mp4.torrent:$CmdZnID [26]
  1272. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e06.720p.hdtv.x264.avs.rartv.torrent:$CmdZnID [26]
  1273. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]game.of.thrones.s06e07.720p.hdtv.x264.avs.rartv.torrent:$CmdZnID [26]
  1274. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]isobuster.pro.3.6.0.0.neosoft.torrent:$CmdZnID [26]
  1275. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]isobuster.pro.3.7.multilingual.serial.4realtorrentz.torrent:$CmdZnID [26]
  1276. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]master.and.commander.sfida.ai.confini.del.mare.2003.bdrip.1080p.x264.ita.eng.dts.carnil91.tntvillage.mkv.torrent:$CmdZnID [26]
  1277. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]mr.robot.s01e03.720p.hdtv.x264.immerse.rartv (1).torrent:$CmdZnID [26]
  1278. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]mr.robot.s01e03.720p.hdtv.x264.immerse.rartv.torrent:$CmdZnID [26]
  1279. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]star.wars.episode.vii.the.force.awakens.2015.1080p.bluray.x264.dts.jyk (1).torrent:$CmdZnID [26]
  1280. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]star.wars.episode.vii.the.force.awakens.2015.1080p.bluray.x264.dts.jyk (2).torrent:$CmdZnID [26]
  1281. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]star.wars.episode.vii.the.force.awakens.2015.1080p.bluray.x264.dts.jyk (3).torrent:$CmdZnID [26]
  1282. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]star.wars.episode.vii.the.force.awakens.2015.1080p.bluray.x264.dts.jyk.torrent:$CmdZnID [26]
  1283. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]sympathy.for.mr.vengeance.2002.720p.brrip.x264.aac.mkv.zen.bud.torrent:$CmdZnID [26]
  1284. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.flash.2014.s02e14.1080p.hdtv.x264.dimension.rartv.torrent:$CmdZnID [26]
  1285. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.flash.2014.s02e14.720p.hdtv.x264.dimension.rartv.torrent:$CmdZnID [26]
  1286. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.flash.2014.s02e20.hdtv.x264.lol.ettv.torrent:$CmdZnID [26]
  1287. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.walking.dead.s06e14.hdtv.x264.killers.mp4.torrent:$CmdZnID [26]
  1288. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (1).torrent:$CmdZnID [26]
  1289. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (10).torrent:$CmdZnID [26]
  1290. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (11).torrent:$CmdZnID [26]
  1291. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (12).torrent:$CmdZnID [26]
  1292. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (13).torrent:$CmdZnID [26]
  1293. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (14).torrent:$CmdZnID [26]
  1294. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (15).torrent:$CmdZnID [26]
  1295. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (16).torrent:$CmdZnID [26]
  1296. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (17).torrent:$CmdZnID [26]
  1297. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (18).torrent:$CmdZnID [26]
  1298. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (2).torrent:$CmdZnID [26]
  1299. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (3).torrent:$CmdZnID [26]
  1300. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (4).torrent:$CmdZnID [26]
  1301. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (5).torrent:$CmdZnID [26]
  1302. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (6).torrent:$CmdZnID [26]
  1303. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (7).torrent:$CmdZnID [26]
  1304. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (8).torrent:$CmdZnID [26]
  1305. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (9).torrent:$CmdZnID [26]
  1306. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.2.s02.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr.torrent:$CmdZnID [26]
  1307. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.3.s03.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (1).torrent:$CmdZnID [26]
  1308. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.3.s03.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (2).torrent:$CmdZnID [26]
  1309. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.3.s03.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr (3).torrent:$CmdZnID [26]
  1310. AlternateDataStreams: C:\Users\T-BAG\Downloads\[kat.cr]the.wire.season.3.s03.1080p.bluray.aac.5.1.10bit.x265.hevc.lion.utr.torrent:$CmdZnID [26]
  1311. AlternateDataStreams: C:\Users\theodore bagwell\Desktop\download.jpg:$CmdZnID [26]
  1312. AlternateDataStreams: C:\Users\theodore bagwell\Downloads\Firefox Setup Stub 35.0.1.exe:$CmdTcID [64]
  1313.  
  1314. ==================== Safe Mode (Whitelisted) ===================
  1315.  
  1316. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  1317.  
  1318.  
  1319. ==================== Association (Whitelisted) ===============
  1320.  
  1321. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  1322.  
  1323.  
  1324. ==================== Internet Explorer trusted/restricted ===============
  1325.  
  1326. (If an entry is included in the fixlist, it will be removed from the registry.)
  1327.  
  1328. IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
  1329. IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
  1330. IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
  1331. IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
  1332. IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
  1333. IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
  1334. IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
  1335. IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
  1336. IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
  1337. IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
  1338. IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
  1339. IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
  1340. IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
  1341. IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
  1342. IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
  1343. IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
  1344. IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
  1345. IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
  1346. IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
  1347. IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
  1348. IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
  1349. IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
  1350. IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
  1351. IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
  1352.  
  1353. There are 7865 more sites.
  1354.  
  1355. IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
  1356. IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
  1357. IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
  1358. IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
  1359. IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\clonewarsadventures.com -> clonewarsadventures.com
  1360. IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\freerealms.com -> freerealms.com
  1361. IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\soe.com -> soe.com
  1362. IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sony.com -> sony.com
  1363. IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
  1364. IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
  1365. IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
  1366. IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
  1367. IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\clonewarsadventures.com -> clonewarsadventures.com
  1368. IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\freerealms.com -> freerealms.com
  1369. IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\soe.com -> soe.com
  1370. IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sony.com -> sony.com
  1371. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\clonewarsadventures.com -> clonewarsadventures.com
  1372. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\freerealms.com -> freerealms.com
  1373. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\hola.org -> hxxp://hola.org
  1374. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\soe.com -> soe.com
  1375. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\sony.com -> sony.com
  1376. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\007guard.com -> install.007guard.com
  1377. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\008i.com -> 008i.com
  1378. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\008k.com -> www.008k.com
  1379. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\00hq.com -> www.00hq.com
  1380. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\010402.com -> 010402.com
  1381. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
  1382. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\0scan.com -> www.0scan.com
  1383. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\1-2005-search.com -> www.1-2005-search.com
  1384. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
  1385. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\1000gratisproben.com -> www.1000gratisproben.com
  1386. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\1001namen.com -> www.1001namen.com
  1387. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\100888290cs.com -> mir.100888290cs.com
  1388. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\100sexlinks.com -> www.100sexlinks.com
  1389. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\10sek.com -> www.10sek.com
  1390. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\12-26.net -> user1.12-26.net
  1391. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\12-27.net -> user1.12-27.net
  1392. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\123fporn.info -> www.123fporn.info
  1393. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
  1394. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\123moviedownload.com -> www.123moviedownload.com
  1395. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000\...\123simsen.com -> www.123simsen.com
  1396.  
  1397. There are 7865 more sites.
  1398.  
  1399. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\clonewarsadventures.com -> clonewarsadventures.com
  1400. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\freerealms.com -> freerealms.com
  1401. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\hola.org -> hxxp://hola.org
  1402. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\soe.com -> soe.com
  1403. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sony.com -> sony.com
  1404. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\007guard.com -> install.007guard.com
  1405. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
  1406. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> www.008k.com
  1407. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> www.00hq.com
  1408. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\010402.com -> 010402.com
  1409. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
  1410. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> www.0scan.com
  1411. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-2005-search.com -> www.1-2005-search.com
  1412. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> www.1-domains-registrations.com
  1413. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1000gratisproben.com -> www.1000gratisproben.com
  1414. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001namen.com -> www.1001namen.com
  1415. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100888290cs.com -> mir.100888290cs.com
  1416. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100sexlinks.com -> www.100sexlinks.com
  1417. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\10sek.com -> www.10sek.com
  1418. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-26.net -> user1.12-26.net
  1419. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-27.net -> user1.12-27.net
  1420. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123fporn.info -> www.123fporn.info
  1421. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
  1422. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123moviedownload.com -> www.123moviedownload.com
  1423. IE restricted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123simsen.com -> www.123simsen.com
  1424.  
  1425. There are 7865 more sites.
  1426.  
  1427. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\clonewarsadventures.com -> clonewarsadventures.com
  1428. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\freerealms.com -> freerealms.com
  1429. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\soe.com -> soe.com
  1430. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sony.com -> sony.com
  1431. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\clonewarsadventures.com -> clonewarsadventures.com
  1432. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\freerealms.com -> freerealms.com
  1433. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\soe.com -> soe.com
  1434. IE trusted site: HKU\S-1-5-21-452096055-1060168818-2339660257-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sony.com -> sony.com
  1435.  
  1436. ==================== Hosts content: ===============================
  1437.  
  1438. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  1439.  
  1440. 2009-07-14 03:34 - 2015-06-15 15:50 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
  1441.  
  1442.  
  1443. ==================== Other Areas ============================
  1444.  
  1445. (Currently there is no automatic fix for this section.)
  1446.  
  1447. HKU\S-1-5-21-452096055-1060168818-2339660257-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\T-BAG\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
  1448. HKU\S-1-5-21-452096055-1060168818-2339660257-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\T-BAG\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
  1449. HKU\S-1-5-21-452096055-1060168818-2339660257-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\theodore bagwell\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
  1450. HKU\S-1-5-21-452096055-1060168818-2339660257-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
  1451. DNS Servers: 156.154.70.22 - 156.154.71.23
  1452. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
  1453. Windows Firewall is disabled.
  1454.  
  1455. ==================== MSCONFIG/TASK MANAGER disabled items ==
  1456.  
  1457. (Currently there is no automatic fix for this section.)
  1458.  
  1459. MSCONFIG\Services: CmdAgent => 2
  1460. MSCONFIG\Services: cmdvirth => 3
  1461. MSCONFIG\Services: DrvRadarProSvc => 2
  1462. MSCONFIG\Services: GalaxyCommunication => 3
  1463. MSCONFIG\Services: iPod Service => 3
  1464. MSCONFIG\Services: MBAMService => 2
  1465. MSCONFIG\Services: nlsvc => 2
  1466. MSCONFIG\Services: NvStreamNetworkSvc => 3
  1467. MSCONFIG\Services: NvStreamSvc => 2
  1468. MSCONFIG\Services: Razer Game Scanner Service => 2
  1469. MSCONFIG\Services: SbieSvc => 2
  1470. MSCONFIG\Services: SDScannerService => 2
  1471. MSCONFIG\Services: SDUpdateService => 2
  1472. MSCONFIG\Services: SDWSCService => 2
  1473. MSCONFIG\Services: SkypeUpdate => 2
  1474. MSCONFIG\Services: Steam Client Service => 3
  1475. MSCONFIG\Services: TeamViewer => 2
  1476. MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
  1477. MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\T-BAG\AppData\Local\Akamai\netsession_win.exe"
  1478. MSCONFIG\startupreg: ASUS WiFi GO! FileTransfer Execute => C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
  1479. MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
  1480. MSCONFIG\startupreg: BitTorrent => "C:\Users\T-BAG\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
  1481. MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
  1482. MSCONFIG\startupreg: COMODO Internet Security => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
  1483. MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
  1484. MSCONFIG\startupreg: GalaxyClient =>
  1485. MSCONFIG\startupreg: Google Update => "C:\Users\T-BAG\AppData\Local\Google\Update\GoogleUpdate.exe" /c
  1486. MSCONFIG\startupreg: GoogleChromeAutoLaunch_77A2A3352B8257029434DCA8264FAF29 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
  1487. MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
  1488. MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
  1489. MSCONFIG\startupreg: NetLimiter => C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
  1490. MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
  1491. MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
  1492. MSCONFIG\startupreg: RGSC => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
  1493. MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
  1494. MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
  1495. MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  1496. MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
  1497. MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
  1498. MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
  1499. MSCONFIG\startupreg: Xvid => C:\Program Files (x86)\Xvid\CheckUpdate.exe
  1500.  
  1501. ==================== FirewallRules (Whitelisted) ===============
  1502.  
  1503. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  1504.  
  1505. FirewallRules: [{3CC30133-3335-4708-AFF9-64D4DAB921B0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  1506. FirewallRules: [{526D5CA0-2F36-4C7F-9306-A5216C411D80}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  1507. FirewallRules: [{998A77EE-F933-48B2-8BC6-B8CD5363E187}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  1508. FirewallRules: [{CE7E9DDE-3444-4AA2-8486-9724879051A5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  1509. FirewallRules: [{17758101-8283-4BCE-8140-3CEC0863C40C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  1510. FirewallRules: [{75EE6D5C-DFE4-4043-9414-4F2781A66180}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  1511. FirewallRules: [{AEA6E72F-CD34-4AB3-B8C2-903CBABA544C}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
  1512. FirewallRules: [{EB7CDE4D-9769-4BED-BAE3-1C5C28B0EC7D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
  1513. FirewallRules: [{8EED77B5-5138-486A-8A3C-F9B036C55E46}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
  1514. FirewallRules: [TCP Query User{399DFA11-329E-48E3-B043-2745F8A20943}C:\users\t-bag\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\t-bag\appdata\local\akamai\netsession_win.exe
  1515. FirewallRules: [UDP Query User{37AB385F-5D24-433B-BC29-5A732352F87F}C:\users\t-bag\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\t-bag\appdata\local\akamai\netsession_win.exe
  1516. FirewallRules: [{799AADB5-92D1-44BE-BFF5-155C248A8F23}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  1517. FirewallRules: [{6BB2A338-A0DC-4AAB-A22D-6CC7766AC0C9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  1518. FirewallRules: [{21A06431-0912-4CF5-9249-194CE838ED26}] => (Allow) LPort=2869
  1519. FirewallRules: [{BBFCAB4C-04AD-4A58-B044-4F6303AABAB1}] => (Allow) LPort=1900
  1520. FirewallRules: [{3A95879E-5E41-4ADC-9AAA-B622287FA694}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
  1521. FirewallRules: [{59588C57-5184-4204-8CA7-36999F86094B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  1522. FirewallRules: [{D84135F6-410C-43CC-9617-5273B5EE776A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  1523. FirewallRules: [{A62623EA-A294-4A20-98DD-F8FD49F609FA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  1524. FirewallRules: [{C0698C27-15A1-40F4-B925-DD9E25ADB388}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  1525. FirewallRules: [{54A9871D-AEC0-4F76-A71C-24075A6CEE99}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  1526. FirewallRules: [{5899F22B-AF4E-4806-92D6-43BA6DE0B540}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\DeviceSetup.exe
  1527. FirewallRules: [{D9AE063D-E20C-43FD-A00D-7AA338581ABE}] => (Allow) LPort=5357
  1528. FirewallRules: [{D94FFF38-4981-4CFB-8FC6-09D603A5C89D}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe
  1529. FirewallRules: [{AF2086E9-B7ED-4B12-97BE-4504B5F70A76}] => (Allow) C:\Users\T-BAG\Downloads\PlayBlackDesert.exe
  1530. FirewallRules: [{24142F7B-4A8D-4280-B4D9-6897A9743231}] => (Allow) C:\Users\T-BAG\Downloads\PlayBlackDesert.exe
  1531. FirewallRules: [{169ACE02-B543-4FB4-89AB-54EB2E90898C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  1532. FirewallRules: [{0E9E1F38-512D-40F4-9136-1E9E86E24193}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  1533. FirewallRules: [{61D7D341-D4D6-47DA-A953-897BB6EFA8D3}] => (Allow) C:\Program Files (x86)\BlackDesertOnlineCBT1\bin\BlackDesert32.exe
  1534. FirewallRules: [{3457207E-90B5-4451-B2A1-F744086DB82B}] => (Allow) C:\Program Files (x86)\BlackDesertOnlineCBT1\bin64\BlackDesert64.exe
  1535. FirewallRules: [{A19272C8-E5A0-47C2-AB69-B5E2ACB57671}] => (Allow) C:\Users\T-BAG\Downloads\bin\BlackDesert32.exe
  1536. FirewallRules: [{3DD50DB7-DA5F-406B-9E9F-DE8A9135E4AC}] => (Allow) C:\Users\T-BAG\Downloads\bin64\BlackDesert64.exe
  1537. FirewallRules: [{39ADE628-3AB0-40C6-A998-3A47A7C07C8B}] => (Allow) C:\Users\T-BAG\Downloads\BlackDesert_Launcher.exe
  1538. FirewallRules: [{1956ECD9-101C-4872-8410-376FE25E4392}] => (Allow) C:\Users\T-BAG\Downloads\BlackDesert_Downloader.exe
  1539. FirewallRules: [{4FE78326-B720-4F4C-9B95-D69074635FE3}] => (Allow) C:\Users\T-BAG\Downloads\bin\BlackDesert32.exe
  1540. FirewallRules: [{3C3F6CD4-CBD0-434F-A6A9-AD3440CCF992}] => (Allow) C:\Users\T-BAG\Downloads\bin64\BlackDesert64.exe
  1541. FirewallRules: [{A42678EF-5725-4502-B96E-562BF030828E}] => (Allow) C:\Users\T-BAG\Downloads\BlackDesert_Launcher.exe
  1542. FirewallRules: [{7EEE0DE9-AEF3-4308-8E5F-9683C5943013}] => (Allow) C:\Users\T-BAG\Downloads\BlackDesert_Downloader.exe
  1543. FirewallRules: [{D4758371-117A-4D03-A41E-218EED0CCAE2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
  1544. FirewallRules: [{89765BD5-F5CA-4A94-B68D-49769D3E124F}] => (Allow) LPort=2869
  1545. FirewallRules: [{ACA638E9-B11F-416A-93E2-360858C8C34B}] => (Allow) LPort=1900
  1546. FirewallRules: [{740772E9-8EF8-46DD-9DA1-2762BF4973B2}] => (Allow) LPort=2869
  1547. FirewallRules: [{5D334C3A-0485-4988-92B5-70026FAE5391}] => (Allow) LPort=1900
  1548. FirewallRules: [{6F2A91B9-A3FC-42B5-B8EB-29DAB6901FC2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
  1549. FirewallRules: [{F39DEABA-6D08-4D1F-81E1-694E479BE234}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
  1550. FirewallRules: [{07B27339-FC84-43A3-ADB3-EA317254D326}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
  1551. FirewallRules: [{CB507281-0A89-46E7-8365-0F9B14399FAE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
  1552. FirewallRules: [{8EE7306B-EC20-43E5-A1F3-8C10D589E36E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
  1553. FirewallRules: [{86D5DEC0-6FD2-4BC4-B5CC-30E3CD078C2C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
  1554. FirewallRules: [{E15D37C9-DEA3-4E89-928E-7950899902C0}] => (Allow) C:\Users\T-BAG\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
  1555. FirewallRules: [{49F5651C-FEF3-4BD7-A670-1F4EDA4472FF}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
  1556. FirewallRules: [{6CD12C0C-1032-435A-A6A7-8DD752066D0A}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
  1557. FirewallRules: [{E6963FF8-1925-499F-B09F-175D9953CC25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
  1558. FirewallRules: [{B4E3CDEB-05F5-4C56-B7ED-315DA2A6D7A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dying Light\DyingLightGame.exe
  1559. FirewallRules: [{2A5E1904-B604-4567-8B47-7E6FCAC6CAE7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
  1560. FirewallRules: [{4D7D5E5A-1FD0-44A7-910A-74BAD565B34D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
  1561. FirewallRules: [{8F041DD1-8AEB-4F89-997F-2DB13E1CE3A4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  1562. FirewallRules: [{42CA926C-FC12-4C2B-90D7-A5B6CC75BEEA}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\AssistTools\WiFi GO! Server.exe
  1563. FirewallRules: [{947CAF02-3E19-49A6-ABBD-B6506C9915F1}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\AssistTools\WiFi GO! Server.exe
  1564. FirewallRules: [{1EA21E23-BF76-43CD-881C-BBBAC84AAFA1}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\ASUSDMS.exe
  1565. FirewallRules: [{349FCD4D-557B-411A-8278-09D138FCD24B}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Remote GO!\ASUSDMS.exe
  1566. StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
  1567. StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
  1568. StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
  1569. StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
  1570.  
  1571. ==================== Restore Points =========================
  1572.  
  1573. 03-08-2016 18:31:26 Scheduled Checkpoint
  1574. 06-08-2016 20:10:25 JRT Pre-Junkware Removal
  1575.  
  1576. ==================== Faulty Device Manager Devices =============
  1577.  
  1578.  
  1579. ==================== Event log errors: =========================
  1580.  
  1581. Application errors:
  1582. ==================
  1583. Error: (08/06/2016 11:18:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1584. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1585.  
  1586. Error: (08/05/2016 12:40:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1587. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1588.  
  1589. Error: (08/04/2016 11:31:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1590. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1591.  
  1592. Error: (08/03/2016 03:13:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1593. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1594.  
  1595. Error: (08/02/2016 03:28:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1596. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1597.  
  1598. Error: (08/02/2016 01:53:52 AM) (Source: Application Error) (EventID: 1000) (User: )
  1599. Description: Faulting application name: NvStreamNetworkService.exe, version: 7.1.2059.1762, time stamp: 0x56fb173e
  1600. Faulting module name: NvMdnsPlugin.dll_unloaded, version: 0.0.0.0, time stamp: 0x56fb1c2b
  1601. Exception code: 0xc0000005
  1602. Fault offset: 0x000007fef0b645a0
  1603. Faulting process id: 0xefc
  1604. Faulting application start time: 0xNvStreamNetworkService.exe0
  1605. Faulting application path: NvStreamNetworkService.exe1
  1606. Faulting module path: NvStreamNetworkService.exe2
  1607. Report Id: NvStreamNetworkService.exe3
  1608.  
  1609. Error: (08/01/2016 06:24:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1610. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1611.  
  1612. Error: (01/01/2009 12:03:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
  1613. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1614.  
  1615. Error: (07/30/2016 01:25:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1616. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1617.  
  1618. Error: (07/29/2016 10:57:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
  1619. Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
  1620.  
  1621.  
  1622. System errors:
  1623. =============
  1624. Error: (08/06/2016 08:21:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
  1625. Description: \??\C:\Windows\System32\drivers\TrueSight.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
  1626.  
  1627. Error: (08/06/2016 08:18:36 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
  1628. Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
  1629. %%1056 = An instance of the service is already running.
  1630.  
  1631. Error: (08/06/2016 08:18:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1632. Description: The MBAMScheduler service terminated unexpectedly. It has done this 1 time(s).
  1633.  
  1634. Error: (08/06/2016 08:18:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1635. Description: The Intel(R) Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).
  1636.  
  1637. Error: (08/06/2016 08:18:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1638. Description: The MBAMService service terminated unexpectedly. It has done this 1 time(s).
  1639.  
  1640. Error: (08/06/2016 08:18:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1641. Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).
  1642.  
  1643. Error: (08/06/2016 08:18:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1644. Description: The NVIDIA Streamer Network Service service terminated unexpectedly. It has done this 1 time(s).
  1645.  
  1646. Error: (08/06/2016 08:18:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
  1647. Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
  1648.  
  1649. Error: (08/06/2016 08:18:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
  1650. Description: The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
  1651.  
  1652. Error: (08/06/2016 08:18:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1653. Description: The Torch Crash Handler service terminated unexpectedly. It has done this 1 time(s).
  1654.  
  1655.  
  1656. CodeIntegrity:
  1657. ===================================
  1658. Date: 2016-02-01 17:33:20.360
  1659. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1660.  
  1661. Date: 2016-02-01 17:33:20.319
  1662. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1663.  
  1664. Date: 2016-02-01 17:33:20.278
  1665. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1666.  
  1667. Date: 2016-02-01 17:33:20.184
  1668. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta32.sys because the set of per-page image hashes could not be found on the system.
  1669.  
  1670. Date: 2016-02-01 17:33:20.143
  1671. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta32.sys because the set of per-page image hashes could not be found on the system.
  1672.  
  1673. Date: 2016-02-01 17:33:20.103
  1674. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta32.sys because the set of per-page image hashes could not be found on the system.
  1675.  
  1676. Date: 2016-01-25 17:56:12.532
  1677. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1678.  
  1679. Date: 2016-01-25 17:56:12.481
  1680. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1681.  
  1682. Date: 2016-01-25 17:56:12.431
  1683. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta64.sys because the set of per-page image hashes could not be found on the system.
  1684.  
  1685. Date: 2016-01-25 17:56:12.290
  1686. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\QGNA\Thetta\Thetta32.sys because the set of per-page image hashes could not be found on the system.
  1687.  
  1688.  
  1689. ==================== Memory info ===========================
  1690.  
  1691. Processor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
  1692. Percentage of memory in use: 61%
  1693. Total physical RAM: 8129.54 MB
  1694. Available physical RAM: 3138.77 MB
  1695. Total Virtual: 16257.27 MB
  1696. Available Virtual: 11670.77 MB
  1697.  
  1698. ==================== Drives ================================
  1699.  
  1700. Drive c: () (Fixed) (Total:931.41 GB) (Free:269.21 GB) NTFS ==>[drive with boot components (obtained from BCD)]
  1701. Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
  1702.  
  1703. ==================== MBR & Partition Table ==================
  1704.  
  1705. ==================== End of Addition.txt ============================
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!