Advertisement
Guest User

Untitled

a guest
Apr 21st, 2017
756
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 88.23 KB | None | 0 0
  1. Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 20-04-2017
  2. Uruchomiony przez Tomasz (21-04-2017 02:00:58)
  3. Uruchomiony z C:\Users\Tomasz\Desktop
  4. Windows 10 Pro Wersja 1607 (X64) (2016-10-07 23:36:28)
  5. Tryb startu: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Konta użytkowników: =============================
  10.  
  11. Administrator (S-1-5-21-527838218-3068815736-2189815317-500 - Administrator - Disabled)
  12. Gość (S-1-5-21-527838218-3068815736-2189815317-501 - Limited - Disabled)
  13. HomeGroupUser$ (S-1-5-21-527838218-3068815736-2189815317-1003 - Limited - Enabled)
  14. Konto domyślne (S-1-5-21-527838218-3068815736-2189815317-503 - Limited - Disabled)
  15. Tomasz (S-1-5-21-527838218-3068815736-2189815317-1001 - Administrator - Enabled) => C:\Users\Tomasz
  16. wrwriogkrg (S-1-5-21-527838218-3068815736-2189815317-1004 - Limited - Disabled)
  17.  
  18. ==================== Centrum zabezpieczeń ========================
  19.  
  20. (Załączenie wejścia w fixlist spowoduje jego usunięcie.)
  21.  
  22. AV: COMODO Antivirus (Enabled - Up to date) {D0CC7563-ABD2-DEBE-138E-FDD553335AF2}
  23. AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  24. AS: Comodo Defense+ (Enabled - Up to date) {6BAD9487-8DE8-D130-293E-C6A728B4104F}
  25. AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  26. FW: COMODO Firewall (Enabled) {E8F7F446-E1BD-DFE6-38D1-54E0ADE01D89}
  27.  
  28. ==================== Zainstalowane programy ======================
  29.  
  30. (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
  31.  
  32. 4K YouTube to MP3 3.1 (HKLM-x32\...\4K YouTube to MP3_is1) (Version: 3.1.1.1707 - Open Media LLC)
  33. 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
  34. abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - )
  35. Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)
  36. Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
  37. AIMP (HKLM-x32\...\AIMP) (Version: v4.13.1893, 07.04.2017 - AIMP DevTeam)
  38. Any Video Converter 6.0.9 (HKLM-x32\...\Any Video Converter) (Version: 6.0.9 - Anvsoft)
  39. Apple Application Support (32-bit) (HKLM-x32\...\{05E07D23-91E9-4E70-A4CC-EF505088F967}) (Version: 5.4.1 - Apple Inc.)
  40. Apple Application Support (64-bit) (HKLM\...\{741291DA-2B34-4D44-8FB6-58EDE21261D8}) (Version: 5.4.1 - Apple Inc.)
  41. Apple Mobile Device Support (HKLM\...\{DB18F1C0-846F-46F5-A074-5B97C8AF5C8E}) (Version: 10.3.1.2 - Apple Inc.)
  42. Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
  43. BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
  44. CCleaner (HKLM\...\CCleaner) (Version: 5.29 - Piriform)
  45. ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl)
  46. Chromium (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Chromium) (Version: 56.0.2924.76 - Chromium)
  47. Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
  48. CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
  49. D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
  50. DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.0.0.0054 - Disc Soft Ltd)
  51. Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
  52. Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
  53. DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
  54. DFX (HKLM-x32\...\DFX) (Version: 12.010.0.0 - Power Technology)
  55. DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
  56. DoNotSpy10 (HKLM-x32\...\{32D066BD-F94C-4948-8FA8-84653EE9617E}_is1) (Version: 1.2.0.1 - pXc-coding.com)
  57. Dropbox (HKLM-x32\...\Dropbox) (Version: 24.4.16 - Dropbox, Inc.)
  58. Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
  59. EaseUS Partition Master 11.9 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
  60. ESET Smart Security (HKLM\...\{4381D174-1253-459D-96C1-50F37EF92330}) (Version: 10.1.204.1 - ESET, spol. s r.o.)
  61. EZ CD Audio Converter 5.5.0.1 (HKLM\...\EZ CD Audio Converter_is1) (Version: 5.5.0.1 - Poikosoft)
  62. F2200 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
  63. Football Manager 2016 (HKLM-x32\...\Football Manager 2016_is1) (Version: - )
  64. Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.2.1.6871 - Foxit Software Inc.)
  65. Franz (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Franz) (Version: 4.0.4 - Franz)
  66. Free MP3 Ringtone Maker 2.3 (HKLM-x32\...\Free MP3 Ringtone Maker_is1) (Version: - musetips.com)
  67. Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
  68. GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
  69. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
  70. Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
  71. Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
  72. GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
  73. HP Deskjet F2200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{60D6AAC5-FDC1-49BA-867B-3135F4726156}) (Version: 14.0 - HP)
  74. HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
  75. HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
  76. HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
  77. HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
  78. HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
  79. HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.69.5 - HTC)
  80. ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
  81. Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
  82. Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
  83. Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
  84. Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
  85. IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
  86. IrfanView 64 (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
  87. IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
  88. iTunes (HKLM\...\{164600BE-9CEC-44E6-9B38-2B12D5FE2342}) (Version: 12.6.0.100 - Apple Inc.)
  89. Java 8 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418040F0}) (Version: 8.0.400 - Oracle Corporation)
  90. KeePass Password Safe 2.35 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.35 - Dominik Reichl)
  91. LameXP v4.14 (HKLM-x32\...\{FBD7A67D-D700-4043-B54F-DD106D00F308}) (Version: 4.14 Final-1 [Build #1934] - LoRd_MuldeR <mulder2@gmx.de>)
  92. LEGO Digital Designer (HKLM-x32\...\New LEGO Digital Designer) (Version: - LEGO A/S)
  93. Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
  94. Microsoft OneDrive (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
  95. Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
  96. Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
  97. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
  98. Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
  99. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - )
  100. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: - )
  101. Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
  102. Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.0.6263 - Mozilla)
  103. Mozilla Thunderbird 52.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 52.0 (x86 pl)) (Version: 52.0 - Mozilla)
  104. Mp3tag v2.81b (HKLM-x32\...\Mp3tag) (Version: 2.81b - Florian Heidenreich)
  105. MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.06 - MSI)
  106. MSI(R) Intel(R) Extreme Tuning Utility (HKLM-x32\...\{482c7431-75e2-4124-a453-6a294cd2c6a4}) (Version: 6.0.2.101 - Intel Corporation)
  107. MSI(R) Intel(R) Extreme Tuning Utility (x32 Version: 6.0.2.101 - Intel Corporation) Hidden
  108. MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
  109. MultiCommander (x64) (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\MultiCommander x64) (Version: 6.9.0.2303 - Mathias Svensson)
  110. Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
  111. Navigator 16 - Setup Utility 16.0.3-1 (HKLM-x32\...\MAPFACTOR_SETUP_UTILITY_HYBRID_16_is1) (Version: 16.0.3-1 - MapFactor s.r.o)
  112. OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
  113. Oprogramowanie mikroukładu Intel® (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
  114. Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
  115. Painkiller Black Edition (HKLM-x32\...\Painkiller Black Edition) (Version: - )
  116. Pakiet sterowników systemu Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
  117. PeaZip 6.4.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.4.0 - Giorgio Tani)
  118. PeaZip configuration (WIN64) (HKLM\...\{4F8D60A8-C53D-47BD-AE5C-31AE6566D638}_is1) (Version: - Giorgio Tani)
  119. PeaZip UNRAR5 plugin 1 (HKLM\...\{00DF53E1-B1C8-4D24-9CA7-62816EA88814}_is1) (Version: - Giorgio Tani)
  120. Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
  121. Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
  122. Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
  123. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7806 - Realtek Semiconductor Corp.)
  124. Revo Uninstaller Pro 3.1.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.8 - VS Revo Group, Ltd.)
  125. Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
  126. SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
  127. Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
  128. Spotify (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Spotify) (Version: 1.0.50.41368.gbd68dbef - Spotify AB)
  129. Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
  130. Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
  131. TagScanner 6.0.18 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov)
  132. TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
  133. TIDAL (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\TIDAL) (Version: 2.1.5 - TIDAL Music AS)
  134. Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
  135. Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0 - Ghisler Software GmbH)
  136. Total Commander wersja 9.0 (HKLM\...\Total Commander_is1) (Version: 9.0 - )
  137. Total Uninstall 6.18.0 (HKLM\...\Total Uninstall 6_is1) (Version: 6.18.0 - Gavrila Martau)
  138. Transcend SSD Scope版本3.4.0 (HKLM-x32\...\{AD8E7B8B-EAD8-4B9F-882E-7970ABFACE34}_is1) (Version: 3.4.0 - Transcend Information, Inc.)
  139. Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
  140. Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
  141. VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
  142. WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
  143. Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
  144. Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
  145.  
  146. ==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
  147.  
  148. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  149.  
  150.  
  151. ==================== Zaplanowane zadania (filtrowane) =============
  152.  
  153. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  154.  
  155. Task: {038D8026-B414-4372-96FE-9F1C724D6B61} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
  156. Task: {0B23FF0E-1A8A-4036-AC70-4A675E1027D4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA
  157. Task: {14EE5194-47D8-49B6-AF33-4083101F1E4D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
  158. Task: {1F1BE6BB-952D-4E83-A2B1-730E6231F6D3} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
  159. Task: {257B361C-1127-42C6-9C88-8485F0C49AB5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA
  160. Task: {2946D48B-83B5-41B7-8F77-933274006E8A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-10-09] (Intel Corporation)
  161. Task: {2B88EF2A-02E0-4138-8791-61B083857E38} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Tomasz\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
  162. Task: {302F874E-BDA3-43EA-BB65-9A6B597B1822} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA
  163. Task: {34AACEDD-4B72-461E-972A-EC8646790DF5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-06] (Dropbox, Inc.)
  164. Task: {5938003B-5151-4A06-A04B-3F19A1E97636} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA
  165. Task: {6DCA1C84-1B99-430E-A205-D7243D3361B0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA
  166. Task: {6E85828D-6208-48AE-9705-AAA686E9B07E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
  167. Task: {7363F01C-BDEA-49BA-AFA0-488EB84CCE32} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA
  168. Task: {74959621-CD06-42F7-8CB1-0E34B73F4A23} - \WPD\SqmUpload_S-1-5-21-527838218-3068815736-2189815317-1001 -> Brak pliku <==== UWAGA
  169. Task: {75973B69-B4A8-4EEC-B8A3-62861D66CA68} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
  170. Task: {768210BF-9776-40E2-B1B5-62A30B763AF2} - \Launch HTC Sync Loader -> Brak pliku <==== UWAGA
  171. Task: {7CE36AC4-3269-4D43-B176-6E96FD465C08} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA
  172. Task: {994AE0A4-D7FD-448F-B858-856993C0A764} - \Wise Care 365 -> Brak pliku <==== UWAGA
  173. Task: {9A4B8DE7-D04B-40D8-B081-09B8F40E06E0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-06] (Dropbox, Inc.)
  174. Task: {A5B0E09C-9D8B-4A8F-9FD7-419130D969AC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
  175. Task: {A9526177-6196-4512-9F35-971B8749D66A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-10-09] (Intel Corporation)
  176. Task: {AD72C14C-CD2A-4FD8-BED2-34EE0F61F70D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA
  177. Task: {ADCFDC91-C05C-422B-BFF2-0DE61EDBC79F} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2015-12-31] (Intel Corporation)
  178. Task: {BA068CD7-C757-4D12-B3C1-C29B6373C550} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
  179. Task: {BA14AC77-D64E-4E23-A549-27E8D101086F} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic
  180. Task: {C49C764C-C941-48D7-BF0B-DCE2A614B50C} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
  181. Task: {CFFD98AB-8A7C-4EF8-91F4-C0C1B4EFFD46} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA
  182. Task: {D00D5C25-99D7-4F13-93D7-5ABFC142EB3F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_127_pepper.exe [2017-03-18] (Adobe Systems Incorporated)
  183. Task: {F36B6219-3C53-49DD-BD56-133FFB61C5BF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA
  184. Task: {FC5BAA1B-E644-4231-87DD-620E18B4C2E2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-04-11] (Piriform Ltd)
  185.  
  186. (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
  187.  
  188. Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
  189. Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  190. Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  191. Task: C:\WINDOWS\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
  192.  
  193. ==================== Skróty =============================
  194.  
  195. (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
  196.  
  197. ShortcutWithArgument: C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Pixlr Touch Up (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData --app-id=jklljiahjgoglchglekebfljnmbaleig
  198.  
  199. ==================== Załadowane moduły (filtrowane) ==============
  200.  
  201. 2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
  202. 2017-04-12 23:47 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
  203. 2017-04-20 11:31 - 2016-07-17 13:05 - 00014464 _____ () C:\ProgramData\KMSAuto\bin\TunMirror2.exe
  204. 2017-04-12 23:47 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
  205. 2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
  206. 2016-10-08 02:23 - 2016-10-08 02:23 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
  207. 2017-03-16 13:18 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
  208. 2017-03-16 13:18 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
  209. 2017-03-16 13:18 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  210. 2017-03-16 13:18 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
  211. 2017-04-12 23:47 - 2017-03-28 07:08 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
  212. 2017-04-12 23:47 - 2017-03-28 07:11 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
  213. 2015-10-21 15:18 - 2016-04-16 09:55 - 01325240 _____ () C:\Program Files (x86)\DFX\DFX.exe
  214. 2015-10-21 15:10 - 2015-11-27 21:05 - 00132280 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
  215. 2015-10-21 15:14 - 2015-11-27 21:05 - 00133304 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
  216. 2015-10-21 15:46 - 2015-11-27 21:05 - 00049848 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared64.dll
  217. 2017-04-20 11:28 - 2017-04-19 07:03 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libglesv2.dll
  218. 2017-04-20 11:28 - 2017-04-19 07:03 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libegl.dll
  219. 2015-10-21 15:42 - 2015-11-27 21:05 - 00050872 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared32.dll
  220. 2017-04-20 19:14 - 2017-04-17 17:09 - 00870720 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
  221. 2017-04-20 19:14 - 2017-03-29 01:54 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
  222. 2017-04-20 19:14 - 2017-03-29 01:54 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
  223. 2017-04-20 19:14 - 2017-03-29 01:54 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
  224. 2017-04-20 19:14 - 2017-04-17 17:13 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
  225. 2017-04-20 19:14 - 2017-04-17 17:13 - 00020824 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
  226. 2017-04-20 19:14 - 2017-03-29 01:54 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
  227. 2017-04-20 19:14 - 2017-03-29 01:54 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
  228. 2017-04-20 19:14 - 2017-04-17 17:13 - 01729360 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
  229. 2017-04-20 19:14 - 2017-04-17 17:13 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
  230. 2017-04-20 19:14 - 2017-03-29 01:54 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
  231. 2017-04-20 19:14 - 2017-03-29 01:54 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
  232. 2017-04-20 19:14 - 2017-03-29 01:54 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
  233. 2017-04-20 19:14 - 2017-03-29 01:56 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
  234. 2017-04-20 19:14 - 2017-04-17 17:13 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
  235. 2017-04-20 19:14 - 2017-04-17 17:13 - 00060736 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
  236. 2017-04-20 19:14 - 2017-04-17 17:13 - 00038712 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
  237. 2017-04-20 19:14 - 2017-03-29 01:56 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
  238. 2017-04-20 19:14 - 2017-03-29 01:54 - 00392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
  239. 2017-04-20 19:14 - 2017-03-29 01:56 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
  240. 2017-04-20 19:14 - 2017-03-29 01:56 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
  241. 2017-04-20 19:14 - 2017-04-17 17:13 - 00392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
  242. 2017-04-20 19:14 - 2017-03-29 01:56 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
  243. 2017-04-20 19:14 - 2017-04-17 17:14 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
  244. 2017-04-20 19:14 - 2017-03-29 01:56 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
  245. 2017-04-20 19:14 - 2017-03-29 01:56 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
  246. 2017-04-20 19:14 - 2017-03-29 01:56 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
  247. 2017-04-20 19:14 - 2017-03-29 01:56 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
  248. 2017-04-20 19:14 - 2017-03-29 01:56 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
  249. 2017-04-20 19:14 - 2017-03-29 01:56 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
  250. 2017-04-20 19:14 - 2017-03-29 01:56 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
  251. 2017-04-20 19:14 - 2017-04-17 17:13 - 00246608 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
  252. 2017-04-20 19:14 - 2017-04-17 17:13 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
  253. 2017-04-20 19:14 - 2017-03-29 01:55 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
  254. 2017-04-20 19:14 - 2017-04-17 17:13 - 00022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
  255. 2017-04-20 19:14 - 2017-04-17 17:14 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
  256. 2017-04-20 19:14 - 2017-03-29 01:56 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
  257. 2017-04-20 19:14 - 2017-04-17 17:13 - 01826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
  258. 2017-04-20 19:14 - 2017-03-29 01:54 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
  259. 2017-04-20 19:14 - 2017-04-17 17:13 - 01972024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
  260. 2017-04-20 19:14 - 2017-04-17 17:13 - 03928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
  261. 2017-04-20 19:14 - 2017-04-17 17:13 - 00171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
  262. 2017-04-20 19:14 - 2017-04-17 17:13 - 00042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
  263. 2017-04-20 19:14 - 2017-04-17 17:13 - 00531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
  264. 2017-04-20 19:14 - 2017-04-17 17:13 - 00133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
  265. 2017-04-20 19:14 - 2017-04-17 17:13 - 00224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
  266. 2017-04-20 19:14 - 2017-04-17 17:13 - 00207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
  267. 2017-04-20 19:14 - 2017-03-29 01:56 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
  268. 2017-04-20 19:14 - 2017-04-17 17:14 - 00054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
  269. 2017-04-20 19:14 - 2017-04-17 17:14 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
  270. 2017-04-20 19:14 - 2017-04-17 17:13 - 00069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
  271. 2017-04-20 19:14 - 2017-04-17 17:13 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
  272. 2017-04-20 19:14 - 2017-04-17 17:14 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
  273. 2017-04-20 19:14 - 2017-04-17 17:14 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
  274. 2017-04-20 19:14 - 2017-03-29 01:56 - 00349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
  275. 2017-04-20 19:14 - 2017-04-17 17:13 - 00103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
  276. 2017-04-20 19:14 - 2017-04-17 17:14 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
  277. 2017-04-20 19:14 - 2017-04-17 17:13 - 00025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
  278. 2017-04-20 19:14 - 2017-03-29 01:52 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
  279. 2017-04-20 19:14 - 2017-04-17 17:13 - 00033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
  280. 2017-04-20 19:14 - 2017-03-22 23:21 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
  281. 2017-04-20 19:14 - 2017-04-17 17:13 - 00084288 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
  282. 2017-04-20 19:14 - 2017-04-17 17:13 - 00030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
  283. 2017-04-20 19:14 - 2017-03-29 02:00 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
  284. 2017-04-20 19:14 - 2017-03-29 02:00 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
  285. 2017-04-20 19:14 - 2017-04-17 17:13 - 00357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
  286. 2017-04-20 19:14 - 2017-04-17 17:13 - 00546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
  287. 2017-04-21 00:44 - 2017-04-21 00:44 - 00018944 _____ () D:\UserTemp\Temp\WPLFE12.tmp\ml_online.lng
  288. 2017-04-21 00:44 - 2017-04-21 00:44 - 00035328 _____ () D:\UserTemp\Temp\WPLFE12.tmp\ombrowser.lng
  289.  
  290. ==================== Alternate Data Streams (filtrowane) =========
  291.  
  292. (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
  293.  
  294. AlternateDataStreams: C:\WINDOWS\acpimof.dll:$CmdTcID [64]
  295. AlternateDataStreams: C:\WINDOWS\splwow64.exe:$CmdTcID [64]
  296. AlternateDataStreams: C:\WINDOWS\unvise32.exe:$CmdTcID [64]
  297. AlternateDataStreams: C:\WINDOWS\WLXPGSS.SCR:$CmdTcID [64]
  298. AlternateDataStreams: C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll:$CmdTcID [64]
  299. AlternateDataStreams: C:\WINDOWS\system32\ActionCenter.dll:$CmdTcID [64]
  300. AlternateDataStreams: C:\WINDOWS\system32\ActionCenterCPL.dll:$CmdTcID [64]
  301. AlternateDataStreams: C:\WINDOWS\system32\ActivationManager.dll:$CmdTcID [64]
  302. AlternateDataStreams: C:\WINDOWS\system32\adsmsext.dll:$CmdTcID [64]
  303. AlternateDataStreams: C:\WINDOWS\system32\aitstatic.exe:$CmdTcID [64]
  304. AlternateDataStreams: C:\WINDOWS\system32\AppCapture.dll:$CmdTcID [64]
  305. AlternateDataStreams: C:\WINDOWS\system32\AppxPackaging.dll:$CmdTcID [64]
  306. AlternateDataStreams: C:\WINDOWS\system32\AudioSrvPolicyManager.dll:$CmdTcID [64]
  307. AlternateDataStreams: C:\WINDOWS\system32\autoplay.dll:$CmdTcID [64]
  308. AlternateDataStreams: C:\WINDOWS\system32\bcastdvr.exe:$CmdTcID [64]
  309. AlternateDataStreams: C:\WINDOWS\system32\BcastDVRHelper.dll:$CmdTcID [64]
  310. AlternateDataStreams: C:\WINDOWS\system32\bcdedit.exe:$CmdTcID [64]
  311. AlternateDataStreams: C:\WINDOWS\system32\bcrypt.dll:$CmdTcID [64]
  312. AlternateDataStreams: C:\WINDOWS\system32\BluetoothApis.dll:$CmdTcID [64]
  313. AlternateDataStreams: C:\WINDOWS\system32\BootMan.exe:$CmdTcID [130]
  314. AlternateDataStreams: C:\WINDOWS\system32\browserbroker.dll:$CmdTcID [64]
  315. AlternateDataStreams: C:\WINDOWS\system32\BthRadioMedia.dll:$CmdTcID [64]
  316. AlternateDataStreams: C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll:$CmdTcID [64]
  317. AlternateDataStreams: C:\WINDOWS\system32\cdd.dll:$CmdTcID [64]
  318. AlternateDataStreams: C:\WINDOWS\system32\cdpsvc.dll:$CmdTcID [64]
  319. AlternateDataStreams: C:\WINDOWS\system32\cdpusersvc.dll:$CmdTcID [64]
  320. AlternateDataStreams: C:\WINDOWS\system32\chartv.dll:$CmdTcID [64]
  321. AlternateDataStreams: C:\WINDOWS\system32\CloudStorageWizard.exe:$CmdTcID [64]
  322. AlternateDataStreams: C:\WINDOWS\system32\cmifw.dll:$CmdTcID [64]
  323. AlternateDataStreams: C:\WINDOWS\system32\comdlg32.dll:$CmdTcID [64]
  324. AlternateDataStreams: C:\WINDOWS\system32\common_clang64.dll:$CmdTcID [64]
  325. AlternateDataStreams: C:\WINDOWS\system32\CPFilters.dll:$CmdTcID [64]
  326. AlternateDataStreams: C:\WINDOWS\system32\credprovs.dll:$CmdTcID [64]
  327. AlternateDataStreams: C:\WINDOWS\system32\crypt32.dll:$CmdTcID [64]
  328. AlternateDataStreams: C:\WINDOWS\system32\cryptngc.dll:$CmdTcID [64]
  329. AlternateDataStreams: C:\WINDOWS\system32\d3d10warp.dll:$CmdTcID [130]
  330. AlternateDataStreams: C:\WINDOWS\system32\d3d9.dll:$CmdTcID [64]
  331. AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_43.dll:$CmdTcID [64]
  332. AlternateDataStreams: C:\WINDOWS\system32\d3dx10_42.dll:$CmdTcID [64]
  333. AlternateDataStreams: C:\WINDOWS\system32\d3dx11_43.dll:$CmdTcID [64]
  334. AlternateDataStreams: C:\WINDOWS\system32\d3dx9_32.dll:$CmdTcID [64]
  335. AlternateDataStreams: C:\WINDOWS\system32\D3DX9_43.dll:$CmdTcID [64]
  336. AlternateDataStreams: C:\WINDOWS\system32\dab.dll:$CmdTcID [64]
  337. AlternateDataStreams: C:\WINDOWS\system32\dafBth.dll:$CmdTcID [64]
  338. AlternateDataStreams: C:\WINDOWS\system32\DeviceCenter.dll:$CmdTcID [64]
  339. AlternateDataStreams: C:\WINDOWS\system32\DeviceEnroller.exe:$CmdTcID [64]
  340. AlternateDataStreams: C:\WINDOWS\system32\DeviceFlows.DataModel.dll:$CmdTcID [64]
  341. AlternateDataStreams: C:\WINDOWS\system32\DevicePairingFolder.dll:$CmdTcID [64]
  342. AlternateDataStreams: C:\WINDOWS\system32\DeviceReactivation.dll:$CmdTcID [64]
  343. AlternateDataStreams: C:\WINDOWS\system32\dfp.exe:$CmdTcID [64]
  344. AlternateDataStreams: C:\WINDOWS\system32\DfpCommon.dll:$CmdTcID [64]
  345. AlternateDataStreams: C:\WINDOWS\system32\dialserver.dll:$CmdTcID [64]
  346. AlternateDataStreams: C:\WINDOWS\system32\difx64.exe:$CmdTcID [64]
  347. AlternateDataStreams: C:\WINDOWS\system32\Display.dll:$CmdTcID [64]
  348. AlternateDataStreams: C:\WINDOWS\system32\dmenrollengine.dll:$CmdTcID [64]
  349. AlternateDataStreams: C:\WINDOWS\system32\DolbyDecMFT.dll:$CmdTcID [130]
  350. AlternateDataStreams: C:\WINDOWS\system32\dpapisrv.dll:$CmdTcID [64]
  351. AlternateDataStreams: C:\WINDOWS\system32\DPTopologyApp.exe:$CmdTcID [64]
  352. AlternateDataStreams: C:\WINDOWS\system32\DPTopologyAppv2_0.exe:$CmdTcID [64]
  353. AlternateDataStreams: C:\WINDOWS\system32\drvstore.dll:$CmdTcID [64]
  354. AlternateDataStreams: C:\WINDOWS\system32\dsreg.dll:$CmdTcID [64]
  355. AlternateDataStreams: C:\WINDOWS\system32\EAMProgressHandler.dll:$CmdTcID [64]
  356. AlternateDataStreams: C:\WINDOWS\system32\EditBufferTestHook.dll:$CmdTcID [64]
  357. AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeHelper.dll:$CmdTcID [64]
  358. AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeManagerObj.dll:$CmdTcID [64]
  359. AlternateDataStreams: C:\WINDOWS\system32\EDPCleanup.exe:$CmdTcID [64]
  360. AlternateDataStreams: C:\WINDOWS\system32\efsext.dll:$CmdTcID [64]
  361. AlternateDataStreams: C:\WINDOWS\system32\EncDec.dll:$CmdTcID [64]
  362. AlternateDataStreams: C:\WINDOWS\system32\energy.dll:$CmdTcID [64]
  363. AlternateDataStreams: C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll:$CmdTcID [64]
  364. AlternateDataStreams: C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll:$CmdTcID [64]
  365. AlternateDataStreams: C:\WINDOWS\system32\epmntdrv.sys:$CmdTcID [130]
  366. AlternateDataStreams: C:\WINDOWS\system32\ErrorDetailsUpdate.dll:$CmdTcID [64]
  367. AlternateDataStreams: C:\WINDOWS\system32\esent.dll:$CmdTcID [64]
  368. AlternateDataStreams: C:\WINDOWS\system32\esentutl.exe:$CmdTcID [64]
  369. AlternateDataStreams: C:\WINDOWS\system32\EuEpmGdi.dll:$CmdTcID [130]
  370. AlternateDataStreams: C:\WINDOWS\system32\EuGdiDrv.sys:$CmdTcID [130]
  371. AlternateDataStreams: C:\WINDOWS\system32\facecredentialprovider.dll:$CmdTcID [64]
  372. AlternateDataStreams: C:\WINDOWS\system32\fhcpl.dll:$CmdTcID [64]
  373. AlternateDataStreams: C:\WINDOWS\system32\fontext.dll:$CmdTcID [130]
  374. AlternateDataStreams: C:\WINDOWS\system32\FSClient.dll:$CmdTcID [64]
  375. AlternateDataStreams: C:\WINDOWS\system32\fveapi.dll:$CmdTcID [64]
  376. AlternateDataStreams: C:\WINDOWS\system32\GfxResources.dll:$CmdTcID [64]
  377. AlternateDataStreams: C:\WINDOWS\system32\GfxUIEx.exe:$CmdTcID [64]
  378. AlternateDataStreams: C:\WINDOWS\system32\Gfxv2_0.exe:$CmdTcID [64]
  379. AlternateDataStreams: C:\WINDOWS\system32\Gfxv4_0.exe:$CmdTcID [64]
  380. AlternateDataStreams: C:\WINDOWS\system32\GlobCollationHost.dll:$CmdTcID [130]
  381. AlternateDataStreams: C:\WINDOWS\system32\hpotscl1.dll:$CmdTcID [64]
  382. AlternateDataStreams: C:\WINDOWS\system32\hpotscl6.dll:$CmdTcID [64]
  383. AlternateDataStreams: C:\WINDOWS\system32\hpovst15.dll:$CmdTcID [64]
  384. AlternateDataStreams: C:\WINDOWS\system32\hpowiav1.dll:$CmdTcID [64]
  385. AlternateDataStreams: C:\WINDOWS\system32\hpowiax7.dll:$CmdTcID [64]
  386. AlternateDataStreams: C:\WINDOWS\system32\hppldcoi.dll:$CmdTcID [64]
  387. AlternateDataStreams: C:\WINDOWS\system32\HttpsDataSource.dll:$CmdTcID [64]
  388. AlternateDataStreams: C:\WINDOWS\system32\IdCtrls.dll:$CmdTcID [64]
  389. AlternateDataStreams: C:\WINDOWS\system32\iepeers.dll:$CmdTcID [64]
  390. AlternateDataStreams: C:\WINDOWS\system32\ieproxy.dll:$CmdTcID [64]
  391. AlternateDataStreams: C:\WINDOWS\system32\ig75icd64.dll:$CmdTcID [64]
  392. AlternateDataStreams: C:\WINDOWS\system32\igc64.dll:$CmdTcID [64]
  393. AlternateDataStreams: C:\WINDOWS\system32\igd10idpp64.dll:$CmdTcID [64]
  394. AlternateDataStreams: C:\WINDOWS\system32\igd11dxva64.dll:$CmdTcID [64]
  395. AlternateDataStreams: C:\WINDOWS\system32\igd12umd64.dll:$CmdTcID [64]
  396. AlternateDataStreams: C:\WINDOWS\system32\igdail64.dll:$CmdTcID [64]
  397. AlternateDataStreams: C:\WINDOWS\system32\igdbcl64.dll:$CmdTcID [130]
  398. AlternateDataStreams: C:\WINDOWS\system32\igdde64.dll:$CmdTcID [64]
  399. AlternateDataStreams: C:\WINDOWS\system32\igdfcl64.dll:$CmdTcID [64]
  400. AlternateDataStreams: C:\WINDOWS\system32\igdmcl64.dll:$CmdTcID [64]
  401. AlternateDataStreams: C:\WINDOWS\system32\igdmd64.dll:$CmdTcID [64]
  402. AlternateDataStreams: C:\WINDOWS\system32\igdrcl64.dll:$CmdTcID [64]
  403. AlternateDataStreams: C:\WINDOWS\system32\igdumdim64.dll:$CmdTcID [130]
  404. AlternateDataStreams: C:\WINDOWS\system32\igfx11cmrt64.dll:$CmdTcID [130]
  405. AlternateDataStreams: C:\WINDOWS\system32\igfxcmjit64.dll:$CmdTcID [64]
  406. AlternateDataStreams: C:\WINDOWS\system32\igfxcmrt64.dll:$CmdTcID [64]
  407. AlternateDataStreams: C:\WINDOWS\system32\igfxCoIn_v4531.dll:$CmdTcID [64]
  408. AlternateDataStreams: C:\WINDOWS\system32\igfxCPL.cpl:$CmdTcID [64]
  409. AlternateDataStreams: C:\WINDOWS\system32\igfxCUIServicePS.dll:$CmdTcID [64]
  410. AlternateDataStreams: C:\WINDOWS\system32\igfxDHLib.dll:$CmdTcID [64]
  411. AlternateDataStreams: C:\WINDOWS\system32\igfxDHLibv2_0.dll:$CmdTcID [64]
  412. AlternateDataStreams: C:\WINDOWS\system32\igfxDILib.dll:$CmdTcID [64]
  413. AlternateDataStreams: C:\WINDOWS\system32\igfxDILibv2_0.dll:$CmdTcID [64]
  414. AlternateDataStreams: C:\WINDOWS\system32\igfxEMLib.dll:$CmdTcID [64]
  415. AlternateDataStreams: C:\WINDOWS\system32\igfxEMLibv2_0.dll:$CmdTcID [64]
  416. AlternateDataStreams: C:\WINDOWS\system32\igfxexps.dll:$CmdTcID [64]
  417. AlternateDataStreams: C:\WINDOWS\system32\igfxext.exe:$CmdTcID [64]
  418. AlternateDataStreams: C:\WINDOWS\system32\igfxLHMLib.dll:$CmdTcID [64]
  419. AlternateDataStreams: C:\WINDOWS\system32\igfxLHMLibv2_0.dll:$CmdTcID [64]
  420. AlternateDataStreams: C:\WINDOWS\system32\igfxSDK.exe:$CmdTcID [64]
  421. AlternateDataStreams: C:\WINDOWS\system32\igfxSDKLib.dll:$CmdTcID [64]
  422. AlternateDataStreams: C:\WINDOWS\system32\igfxSDKLibv2_0.dll:$CmdTcID [64]
  423. AlternateDataStreams: C:\WINDOWS\system32\iglhcp64.dll:$CmdTcID [64]
  424. AlternateDataStreams: C:\WINDOWS\system32\iglhsip64.dll:$CmdTcID [64]
  425. AlternateDataStreams: C:\WINDOWS\system32\InputLocaleManager.dll:$CmdTcID [64]
  426. AlternateDataStreams: C:\WINDOWS\system32\IntelCpHDCPSvc.exe:$CmdTcID [64]
  427. AlternateDataStreams: C:\WINDOWS\system32\IntelOpenCL64.dll:$CmdTcID [64]
  428. AlternateDataStreams: C:\WINDOWS\system32\IntelWiDiMCComp64.dll:$CmdTcID [64]
  429. AlternateDataStreams: C:\WINDOWS\system32\IntelWiDiUMS64.exe:$CmdTcID [64]
  430. AlternateDataStreams: C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll:$CmdTcID [130]
  431. AlternateDataStreams: C:\WINDOWS\system32\iscsiwmi.dll:$CmdTcID [64]
  432. AlternateDataStreams: C:\WINDOWS\system32\java.exe:$CmdTcID [64]
  433. AlternateDataStreams: C:\WINDOWS\system32\javaw.exe:$CmdTcID [64]
  434. AlternateDataStreams: C:\WINDOWS\system32\javaws.exe:$CmdTcID [64]
  435. AlternateDataStreams: C:\WINDOWS\system32\JpMapControl.dll:$CmdTcID [64]
  436. AlternateDataStreams: C:\WINDOWS\system32\ListSvc.dll:$CmdTcID [64]
  437. AlternateDataStreams: C:\WINDOWS\system32\LocationFramework.dll:$CmdTcID [64]
  438. AlternateDataStreams: C:\WINDOWS\system32\lpremove.exe:$CmdTcID [64]
  439. AlternateDataStreams: C:\WINDOWS\system32\lsm.dll:$CmdTcID [64]
  440. AlternateDataStreams: C:\WINDOWS\system32\MapControlCore.dll:$CmdTcID [64]
  441. AlternateDataStreams: C:\WINDOWS\system32\MapsBtSvc.dll:$CmdTcID [64]
  442. AlternateDataStreams: C:\WINDOWS\system32\MDMAppInstaller.exe:$CmdTcID [64]
  443. AlternateDataStreams: C:\WINDOWS\system32\mdmregistration.dll:$CmdTcID [64]
  444. AlternateDataStreams: C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll:$CmdTcID [64]
  445. AlternateDataStreams: C:\WINDOWS\system32\mfaudiocnv.dll:$CmdTcID [130]
  446. AlternateDataStreams: C:\WINDOWS\system32\mfksproxy.dll:$CmdTcID [64]
  447. AlternateDataStreams: C:\WINDOWS\system32\mfps.dll:$CmdTcID [64]
  448. AlternateDataStreams: C:\WINDOWS\system32\mfsensorgroup.dll:$CmdTcID [64]
  449. AlternateDataStreams: C:\WINDOWS\system32\microsoft-windows-system-events.dll:$CmdTcID [64]
  450. AlternateDataStreams: C:\WINDOWS\system32\migisol.dll:$CmdTcID [64]
  451. AlternateDataStreams: C:\WINDOWS\system32\moshostcore.dll:$CmdTcID [64]
  452. AlternateDataStreams: C:\WINDOWS\system32\MosStorage.dll:$CmdTcID [64]
  453. AlternateDataStreams: C:\WINDOWS\system32\MrmCoreR.dll:$CmdTcID [64]
  454. AlternateDataStreams: C:\WINDOWS\system32\MRT.exe:$CmdTcID [64]
  455. AlternateDataStreams: C:\WINDOWS\system32\msdtcprx.dll:$CmdTcID [64]
  456. AlternateDataStreams: C:\WINDOWS\system32\msdtcuiu.dll:$CmdTcID [64]
  457. AlternateDataStreams: C:\WINDOWS\system32\msi.dll:$CmdTcID [64]
  458. AlternateDataStreams: C:\WINDOWS\system32\msinfo32.exe:$CmdTcID [64]
  459. AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID [64]
  460. AlternateDataStreams: C:\WINDOWS\system32\MSVidCtl.dll:$CmdTcID [130]
  461. AlternateDataStreams: C:\WINDOWS\system32\msvproc.dll:$CmdTcID [64]
  462. AlternateDataStreams: C:\WINDOWS\system32\ncsi.dll:$CmdTcID [130]
  463. AlternateDataStreams: C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe:$CmdTcID [64]
  464. AlternateDataStreams: C:\WINDOWS\system32\netplwiz.dll:$CmdTcID [64]
  465. AlternateDataStreams: C:\WINDOWS\system32\NetSetupApi.dll:$CmdTcID [64]
  466. AlternateDataStreams: C:\WINDOWS\system32\NetSetupEngine.dll:$CmdTcID [64]
  467. AlternateDataStreams: C:\WINDOWS\system32\NetSetupShim.dll:$CmdTcID [64]
  468. AlternateDataStreams: C:\WINDOWS\system32\NetSetupSvc.dll:$CmdTcID [64]
  469. AlternateDataStreams: C:\WINDOWS\system32\NetworkDesktopSettings.dll:$CmdTcID [64]
  470. AlternateDataStreams: C:\WINDOWS\system32\NetworkMobileSettings.dll:$CmdTcID [64]
  471. AlternateDataStreams: C:\WINDOWS\system32\NetworkUXBroker.dll:$CmdTcID [64]
  472. AlternateDataStreams: C:\WINDOWS\system32\ngccredprov.dll:$CmdTcID [64]
  473. AlternateDataStreams: C:\WINDOWS\system32\NgcCtnr.dll:$CmdTcID [64]
  474. AlternateDataStreams: C:\WINDOWS\system32\ngcsvc.dll:$CmdTcID [64]
  475. AlternateDataStreams: C:\WINDOWS\system32\nlasvc.dll:$CmdTcID [64]
  476. AlternateDataStreams: C:\WINDOWS\system32\NMAA.dll:$CmdTcID [64]
  477. AlternateDataStreams: C:\WINDOWS\system32\NotificationController.dll:$CmdTcID [64]
  478. AlternateDataStreams: C:\WINDOWS\system32\NPSM.dll:$CmdTcID [130]
  479. AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID [64]
  480. AlternateDataStreams: C:\WINDOWS\system32\offreg.dll:$CmdTcID [64]
  481. AlternateDataStreams: C:\WINDOWS\system32\OnDemandConnRouteHelper.dll:$CmdTcID [64]
  482. AlternateDataStreams: C:\WINDOWS\system32\OpenCL.DLL:$CmdTcID [130]
  483. AlternateDataStreams: C:\WINDOWS\system32\pcasvc.dll:$CmdTcID [64]
  484. AlternateDataStreams: C:\WINDOWS\system32\PortChanger.exe:$CmdTcID [64]
  485. AlternateDataStreams: C:\WINDOWS\system32\powercfg.exe:$CmdTcID [64]
  486. AlternateDataStreams: C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
  487. AlternateDataStreams: C:\WINDOWS\system32\PresentationNative_v0300.dll:$CmdTcID [64]
  488. AlternateDataStreams: C:\WINDOWS\system32\ProvSysprep.dll:$CmdTcID [64]
  489. AlternateDataStreams: C:\WINDOWS\system32\PsmServiceExtHost.dll:$CmdTcID [64]
  490. AlternateDataStreams: C:\WINDOWS\system32\qmgr.dll:$CmdTcID [64]
  491. AlternateDataStreams: C:\WINDOWS\system32\rasapi32.dll:$CmdTcID [64]
  492. AlternateDataStreams: C:\WINDOWS\system32\ReAgentc.exe:$CmdTcID [64]
  493. AlternateDataStreams: C:\WINDOWS\system32\RemoteNaturalLanguage.dll:$CmdTcID [64]
  494. AlternateDataStreams: C:\WINDOWS\system32\ReportingCSP.dll:$CmdTcID [64]
  495. AlternateDataStreams: C:\WINDOWS\system32\RjvMDMConfig.dll:$CmdTcID [64]
  496. AlternateDataStreams: C:\WINDOWS\system32\RtNicProp64.dll:$CmdTcID [64]
  497. AlternateDataStreams: C:\WINDOWS\system32\RTWorkQ.dll:$CmdTcID [64]
  498. AlternateDataStreams: C:\WINDOWS\system32\sendmail.dll:$CmdTcID [64]
  499. AlternateDataStreams: C:\WINDOWS\system32\services.exe:$CmdTcID [64]
  500. AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll:$CmdTcID [64]
  501. AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll:$CmdTcID [64]
  502. AlternateDataStreams: C:\WINDOWS\system32\setupempdrvx64.exe:$CmdTcID [130]
  503. AlternateDataStreams: C:\WINDOWS\system32\setupugc.exe:$CmdTcID [64]
  504. AlternateDataStreams: C:\WINDOWS\system32\shdocvw.dll:$CmdTcID [64]
  505. AlternateDataStreams: C:\WINDOWS\system32\SndVolSSO.dll:$CmdTcID [64]
  506. AlternateDataStreams: C:\WINDOWS\system32\sppnp.dll:$CmdTcID [64]
  507. AlternateDataStreams: C:\WINDOWS\system32\sppsvc.exe:$CmdTcID [64]
  508. AlternateDataStreams: C:\WINDOWS\system32\sppwinob.dll:$CmdTcID [64]
  509. AlternateDataStreams: C:\WINDOWS\system32\sspicli.dll:$CmdTcID [64]
  510. AlternateDataStreams: C:\WINDOWS\system32\StorSvc.dll:$CmdTcID [64]
  511. AlternateDataStreams: C:\WINDOWS\system32\SyncCenter.dll:$CmdTcID [64]
  512. AlternateDataStreams: C:\WINDOWS\system32\taskbarcpl.dll:$CmdTcID [64]
  513. AlternateDataStreams: C:\WINDOWS\system32\timedate.cpl:$CmdTcID [64]
  514. AlternateDataStreams: C:\WINDOWS\system32\TpmTasks.dll:$CmdTcID [64]
  515. AlternateDataStreams: C:\WINDOWS\system32\TSpkg.dll:$CmdTcID [64]
  516. AlternateDataStreams: C:\WINDOWS\system32\TsWpfWrp.exe:$CmdTcID [64]
  517. AlternateDataStreams: C:\WINDOWS\system32\twinui.pcshell.dll:$CmdTcID [64]
  518. AlternateDataStreams: C:\WINDOWS\system32\UIAnimation.dll:$CmdTcID [64]
  519. AlternateDataStreams: C:\WINDOWS\system32\UIAutomationCore.dll:$CmdTcID [64]
  520. AlternateDataStreams: C:\WINDOWS\system32\umpoext.dll:$CmdTcID [64]
  521. AlternateDataStreams: C:\WINDOWS\system32\usbaaplrc.dll:$CmdTcID [64]
  522. AlternateDataStreams: C:\WINDOWS\system32\user32.dll:$CmdTcID [64]
  523. AlternateDataStreams: C:\WINDOWS\system32\UtcResources.dll:$CmdTcID [64]
  524. AlternateDataStreams: C:\WINDOWS\system32\VEStoreEventHandlers.dll:$CmdTcID [64]
  525. AlternateDataStreams: C:\WINDOWS\system32\Vestris.ResourceLib.dll:$CmdTcID [64]
  526. AlternateDataStreams: C:\WINDOWS\system32\VPNv2CSP.dll:$CmdTcID [64]
  527. AlternateDataStreams: C:\WINDOWS\system32\wc_storage.dll:$CmdTcID [64]
  528. AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01007.dll:$CmdTcID [64]
  529. AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01009.dll:$CmdTcID [64]
  530. AlternateDataStreams: C:\WINDOWS\system32\weretw.dll:$CmdTcID [64]
  531. AlternateDataStreams: C:\WINDOWS\system32\wifitask.exe:$CmdTcID [64]
  532. AlternateDataStreams: C:\WINDOWS\system32\wincorlib.dll:$CmdTcID [64]
  533. AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll:$CmdTcID [64]
  534. AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
  535. AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
  536. AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
  537. AlternateDataStreams: C:\WINDOWS\system32\Windows.StateRepository.dll:$CmdTcID [64]
  538. AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll:$CmdTcID [64]
  539. AlternateDataStreams: C:\WINDOWS\system32\wininetlui.dll:$CmdTcID [64]
  540. AlternateDataStreams: C:\WINDOWS\system32\WinUSBCoInstaller.dll:$CmdTcID [64]
  541. AlternateDataStreams: C:\WINDOWS\system32\WinUSBCoInstaller2.dll:$CmdTcID [64]
  542. AlternateDataStreams: C:\WINDOWS\system32\wkssvc.dll:$CmdTcID [64]
  543. AlternateDataStreams: C:\WINDOWS\system32\wlidsvc.dll:$CmdTcID [64]
  544. AlternateDataStreams: C:\WINDOWS\system32\wmpdxm.dll:$CmdTcID [64]
  545. AlternateDataStreams: C:\WINDOWS\system32\wmpeffects.dll:$CmdTcID [64]
  546. AlternateDataStreams: C:\WINDOWS\system32\wmpshell.dll:$CmdTcID [64]
  547. AlternateDataStreams: C:\WINDOWS\system32\WordBreakers.dll:$CmdTcID [64]
  548. AlternateDataStreams: C:\WINDOWS\system32\WpcRefreshTask.dll:$CmdTcID [64]
  549. AlternateDataStreams: C:\WINDOWS\system32\WpcTok.exe:$CmdTcID [64]
  550. AlternateDataStreams: C:\WINDOWS\system32\wpnprv.dll:$CmdTcID [64]
  551. AlternateDataStreams: C:\WINDOWS\system32\wpx.dll:$CmdTcID [64]
  552. AlternateDataStreams: C:\WINDOWS\system32\wscinterop.dll:$CmdTcID [64]
  553. AlternateDataStreams: C:\WINDOWS\system32\wscsvc.dll:$CmdTcID [64]
  554. AlternateDataStreams: C:\WINDOWS\system32\wsecedit.dll:$CmdTcID [64]
  555. AlternateDataStreams: C:\WINDOWS\system32\WSManHTTPConfig.exe:$CmdTcID [64]
  556. AlternateDataStreams: C:\WINDOWS\system32\WsmSvc.dll:$CmdTcID [64]
  557. AlternateDataStreams: C:\WINDOWS\system32\wu.upgrade.ps.dll:$CmdTcID [64]
  558. AlternateDataStreams: C:\WINDOWS\system32\xactengine2_1.dll:$CmdTcID [64]
  559. AlternateDataStreams: C:\WINDOWS\system32\xactengine3_5.dll:$CmdTcID [64]
  560. AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_5.dll:$CmdTcID [64]
  561. AlternateDataStreams: C:\WINDOWS\system32\XAudio2_7.dll:$CmdTcID [130]
  562. AlternateDataStreams: C:\WINDOWS\system32\zipfldr.dll:$CmdTcID [64]
  563. AlternateDataStreams: C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat:$CmdTcID [130]
  564. AlternateDataStreams: C:\WINDOWS\SysWOW64\ActionCenterCPL.dll:$CmdTcID [64]
  565. AlternateDataStreams: C:\WINDOWS\SysWOW64\ActivationManager.dll:$CmdTcID [64]
  566. AlternateDataStreams: C:\WINDOWS\SysWOW64\adsmsext.dll:$CmdTcID [64]
  567. AlternateDataStreams: C:\WINDOWS\SysWOW64\AppCapture.dll:$CmdTcID [64]
  568. AlternateDataStreams: C:\WINDOWS\SysWOW64\AppxPackaging.dll:$CmdTcID [64]
  569. AlternateDataStreams: C:\WINDOWS\SysWOW64\AuthExt.dll:$CmdTcID [64]
  570. AlternateDataStreams: C:\WINDOWS\SysWOW64\autoplay.dll:$CmdTcID [64]
  571. AlternateDataStreams: C:\WINDOWS\SysWOW64\bcrypt.dll:$CmdTcID [64]
  572. AlternateDataStreams: C:\WINDOWS\SysWOW64\BluetoothApis.dll:$CmdTcID [64]
  573. AlternateDataStreams: C:\WINDOWS\SysWOW64\BootMan.exe:$CmdTcID [130]
  574. AlternateDataStreams: C:\WINDOWS\SysWOW64\chartv.dll:$CmdTcID [64]
  575. AlternateDataStreams: C:\WINDOWS\SysWOW64\CloudStorageWizard.exe:$CmdTcID [64]
  576. AlternateDataStreams: C:\WINDOWS\SysWOW64\cmifw.dll:$CmdTcID [64]
  577. AlternateDataStreams: C:\WINDOWS\SysWOW64\combase.dll:$CmdTcID [64]
  578. AlternateDataStreams: C:\WINDOWS\SysWOW64\comctl32.dll:$CmdTcID [64]
  579. AlternateDataStreams: C:\WINDOWS\SysWOW64\comdlg32.dll:$CmdTcID [64]
  580. AlternateDataStreams: C:\WINDOWS\SysWOW64\common_clang32.dll:$CmdTcID [64]
  581. AlternateDataStreams: C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
  582. AlternateDataStreams: C:\WINDOWS\SysWOW64\CPFilters.dll:$CmdTcID [64]
  583. AlternateDataStreams: C:\WINDOWS\SysWOW64\credprovs.dll:$CmdTcID [64]
  584. AlternateDataStreams: C:\WINDOWS\SysWOW64\crypt32.dll:$CmdTcID [64]
  585. AlternateDataStreams: C:\WINDOWS\SysWOW64\cryptngc.dll:$CmdTcID [64]
  586. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d10warp.dll:$CmdTcID [64]
  587. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d8.dll:$CmdTcID [64]
  588. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d9.dll:$CmdTcID [130]
  589. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
  590. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
  591. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_35.dll:$CmdTcID [130]
  592. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_36.dll:$CmdTcID [64]
  593. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64]
  594. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_38.dll:$CmdTcID [64]
  595. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64]
  596. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64]
  597. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_41.dll:$CmdTcID [64]
  598. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_42.dll:$CmdTcID [64]
  599. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
  600. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_42.dll:$CmdTcID [64]
  601. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
  602. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10.dll:$CmdTcID [64]
  603. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
  604. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
  605. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_35.dll:$CmdTcID [130]
  606. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_36.dll:$CmdTcID [64]
  607. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_37.dll:$CmdTcID [64]
  608. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_38.dll:$CmdTcID [64]
  609. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_39.dll:$CmdTcID [64]
  610. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_40.dll:$CmdTcID [64]
  611. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_41.dll:$CmdTcID [64]
  612. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_42.dll:$CmdTcID [64]
  613. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
  614. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx11_42.dll:$CmdTcID [64]
  615. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
  616. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
  617. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
  618. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
  619. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
  620. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
  621. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
  622. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
  623. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_32.dll:$CmdTcID [64]
  624. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
  625. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
  626. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
  627. AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
  628. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_37.dll:$CmdTcID [130]
  629. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_38.dll:$CmdTcID [64]
  630. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_39.dll:$CmdTcID [64]
  631. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_40.dll:$CmdTcID [64]
  632. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_41.dll:$CmdTcID [64]
  633. AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
  634. AlternateDataStreams: C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll:$CmdTcID [64]
  635. AlternateDataStreams: C:\WINDOWS\SysWOW64\DolbyDecMFT.dll:$CmdTcID [64]
  636. AlternateDataStreams: C:\WINDOWS\SysWOW64\drvstore.dll:$CmdTcID [64]
  637. AlternateDataStreams: C:\WINDOWS\SysWOW64\dsreg.dll:$CmdTcID [64]
  638. AlternateDataStreams: C:\WINDOWS\SysWOW64\dtdump.exe:$CmdTcID [64]
  639. AlternateDataStreams: C:\WINDOWS\SysWOW64\EditBufferTestHook.dll:$CmdTcID [64]
  640. AlternateDataStreams: C:\WINDOWS\SysWOW64\efsext.dll:$CmdTcID [64]
  641. AlternateDataStreams: C:\WINDOWS\SysWOW64\epmntdrv.sys:$CmdTcID [130]
  642. AlternateDataStreams: C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll:$CmdTcID [64]
  643. AlternateDataStreams: C:\WINDOWS\SysWOW64\esent.dll:$CmdTcID [64]
  644. AlternateDataStreams: C:\WINDOWS\SysWOW64\esentutl.exe:$CmdTcID [64]
  645. AlternateDataStreams: C:\WINDOWS\SysWOW64\EuEpmGdi.dll:$CmdTcID [130]
  646. AlternateDataStreams: C:\WINDOWS\SysWOW64\EuGdiDrv.sys:$CmdTcID [130]
  647. AlternateDataStreams: C:\WINDOWS\SysWOW64\FSClient.dll:$CmdTcID [64]
  648. AlternateDataStreams: C:\WINDOWS\SysWOW64\GlobCollationHost.dll:$CmdTcID [64]
  649. AlternateDataStreams: C:\WINDOWS\SysWOW64\iepeers.dll:$CmdTcID [64]
  650. AlternateDataStreams: C:\WINDOWS\SysWOW64\ig75icd32.dll:$CmdTcID [64]
  651. AlternateDataStreams: C:\WINDOWS\SysWOW64\igc32.dll:$CmdTcID [64]
  652. AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10idpp32.dll:$CmdTcID [64]
  653. AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10iumd32.dll:$CmdTcID [64]
  654. AlternateDataStreams: C:\WINDOWS\SysWOW64\igd11dxva32.dll:$CmdTcID [64]
  655. AlternateDataStreams: C:\WINDOWS\SysWOW64\igd12umd32.dll:$CmdTcID [64]
  656. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdail32.dll:$CmdTcID [64]
  657. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdbcl32.dll:$CmdTcID [64]
  658. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdde32.dll:$CmdTcID [64]
  659. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdfcl32.dll:$CmdTcID [64]
  660. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdmcl32.dll:$CmdTcID [64]
  661. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdmd32.dll:$CmdTcID [64]
  662. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdrcl32.dll:$CmdTcID [64]
  663. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdumdim32.dll:$CmdTcID [64]
  664. AlternateDataStreams: C:\WINDOWS\SysWOW64\igdusc32.dll:$CmdTcID [64]
  665. AlternateDataStreams: C:\WINDOWS\SysWOW64\igfx11cmrt32.dll:$CmdTcID [64]
  666. AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmjit32.dll:$CmdTcID [64]
  667. AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmrt32.dll:$CmdTcID [64]
  668. AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxexps32.dll:$CmdTcID [64]
  669. AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhcp32.dll:$CmdTcID [64]
  670. AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhsip32.dll:$CmdTcID [64]
  671. AlternateDataStreams: C:\WINDOWS\SysWOW64\InputLocaleManager.dll:$CmdTcID [64]
  672. AlternateDataStreams: C:\WINDOWS\SysWOW64\IntelOpenCL32.dll:$CmdTcID [64]
  673. AlternateDataStreams: C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll:$CmdTcID [64]
  674. AlternateDataStreams: C:\WINDOWS\SysWOW64\iscsiwmi.dll:$CmdTcID [64]
  675. AlternateDataStreams: C:\WINDOWS\SysWOW64\JpMapControl.dll:$CmdTcID [64]
  676. AlternateDataStreams: C:\WINDOWS\SysWOW64\MapControlCore.dll:$CmdTcID [64]
  677. AlternateDataStreams: C:\WINDOWS\SysWOW64\MapsBtSvc.dll:$CmdTcID [64]
  678. AlternateDataStreams: C:\WINDOWS\SysWOW64\mdmregistration.dll:$CmdTcID [64]
  679. AlternateDataStreams: C:\WINDOWS\SysWOW64\mfaudiocnv.dll:$CmdTcID [64]
  680. AlternateDataStreams: C:\WINDOWS\SysWOW64\mfksproxy.dll:$CmdTcID [64]
  681. AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsensorgroup.dll:$CmdTcID [64]
  682. AlternateDataStreams: C:\WINDOWS\SysWOW64\migisol.dll:$CmdTcID [64]
  683. AlternateDataStreams: C:\WINDOWS\SysWOW64\MosStorage.dll:$CmdTcID [64]
  684. AlternateDataStreams: C:\WINDOWS\SysWOW64\MrmCoreR.dll:$CmdTcID [64]
  685. AlternateDataStreams: C:\WINDOWS\SysWOW64\msi.dll:$CmdTcID [64]
  686. AlternateDataStreams: C:\WINDOWS\SysWOW64\msinfo32.exe:$CmdTcID [64]
  687. AlternateDataStreams: C:\WINDOWS\SysWOW64\msvcr70.dll:$CmdTcID [64]
  688. AlternateDataStreams: C:\WINDOWS\SysWOW64\MSVidCtl.dll:$CmdTcID [64]
  689. AlternateDataStreams: C:\WINDOWS\SysWOW64\msvproc.dll:$CmdTcID [64]
  690. AlternateDataStreams: C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe:$CmdTcID [130]
  691. AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupApi.dll:$CmdTcID [64]
  692. AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupEngine.dll:$CmdTcID [64]
  693. AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupShim.dll:$CmdTcID [64]
  694. AlternateDataStreams: C:\WINDOWS\SysWOW64\ngccredprov.dll:$CmdTcID [64]
  695. AlternateDataStreams: C:\WINDOWS\SysWOW64\NMAA.dll:$CmdTcID [64]
  696. AlternateDataStreams: C:\WINDOWS\SysWOW64\NPSM.dll:$CmdTcID [64]
  697. AlternateDataStreams: C:\WINDOWS\SysWOW64\ntdll.dll:$CmdTcID [64]
  698. AlternateDataStreams: C:\WINDOWS\SysWOW64\ntshrui.dll:$CmdTcID [64]
  699. AlternateDataStreams: C:\WINDOWS\SysWOW64\offreg.dll:$CmdTcID [64]
  700. AlternateDataStreams: C:\WINDOWS\SysWOW64\opencl.dll:$CmdTcID [64]
  701. AlternateDataStreams: C:\WINDOWS\SysWOW64\powercfg.exe:$CmdTcID [64]
  702. AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
  703. AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll:$CmdTcID [64]
  704. AlternateDataStreams: C:\WINDOWS\SysWOW64\rasapi32.dll:$CmdTcID [64]
  705. AlternateDataStreams: C:\WINDOWS\SysWOW64\ReAgentc.exe:$CmdTcID [64]
  706. AlternateDataStreams: C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll:$CmdTcID [64]
  707. AlternateDataStreams: C:\WINDOWS\SysWOW64\RTWorkQ.dll:$CmdTcID [64]
  708. AlternateDataStreams: C:\WINDOWS\SysWOW64\sendmail.dll:$CmdTcID [64]
  709. AlternateDataStreams: C:\WINDOWS\SysWOW64\setupempdrv03.exe:$CmdTcID [130]
  710. AlternateDataStreams: C:\WINDOWS\SysWOW64\setupugc.exe:$CmdTcID [64]
  711. AlternateDataStreams: C:\WINDOWS\SysWOW64\SndVolSSO.dll:$CmdTcID [64]
  712. AlternateDataStreams: C:\WINDOWS\SysWOW64\sspicli.dll:$CmdTcID [64]
  713. AlternateDataStreams: C:\WINDOWS\SysWOW64\stobject.dll:$CmdTcID [64]
  714. AlternateDataStreams: C:\WINDOWS\SysWOW64\systemcpl.dll:$CmdTcID [64]
  715. AlternateDataStreams: C:\WINDOWS\SysWOW64\TSpkg.dll:$CmdTcID [64]
  716. AlternateDataStreams: C:\WINDOWS\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
  717. AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAnimation.dll:$CmdTcID [64]
  718. AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAutomationCore.dll:$CmdTcID [64]
  719. AlternateDataStreams: C:\WINDOWS\SysWOW64\user32.dll:$CmdTcID [64]
  720. AlternateDataStreams: C:\WINDOWS\SysWOW64\weretw.dll:$CmdTcID [64]
  721. AlternateDataStreams: C:\WINDOWS\SysWOW64\wincorlib.dll:$CmdTcID [130]
  722. AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
  723. AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
  724. AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
  725. AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
  726. AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.StateRepository.dll:$CmdTcID [64]
  727. AlternateDataStreams: C:\WINDOWS\SysWOW64\wininetlui.dll:$CmdTcID [64]
  728. AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpdxm.dll:$CmdTcID [64]
  729. AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpeffects.dll:$CmdTcID [64]
  730. AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpshell.dll:$CmdTcID [64]
  731. AlternateDataStreams: C:\WINDOWS\SysWOW64\WordBreakers.dll:$CmdTcID [64]
  732. AlternateDataStreams: C:\WINDOWS\SysWOW64\wscinterop.dll:$CmdTcID [64]
  733. AlternateDataStreams: C:\WINDOWS\SysWOW64\wsecedit.dll:$CmdTcID [64]
  734. AlternateDataStreams: C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
  735. AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
  736. AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
  737. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
  738. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64]
  739. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64]
  740. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64]
  741. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64]
  742. AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64]
  743. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
  744. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
  745. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
  746. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
  747. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
  748. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
  749. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
  750. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
  751. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
  752. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
  753. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
  754. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_0.dll:$CmdTcID [64]
  755. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_1.dll:$CmdTcID [64]
  756. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_2.dll:$CmdTcID [64]
  757. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_3.dll:$CmdTcID [64]
  758. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_4.dll:$CmdTcID [64]
  759. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_5.dll:$CmdTcID [64]
  760. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_6.dll:$CmdTcID [64]
  761. AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_7.dll:$CmdTcID [64]
  762. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64]
  763. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64]
  764. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64]
  765. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_3.dll:$CmdTcID [64]
  766. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64]
  767. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
  768. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_0.dll:$CmdTcID [64]
  769. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_1.dll:$CmdTcID [64]
  770. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_2.dll:$CmdTcID [64]
  771. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_3.dll:$CmdTcID [64]
  772. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_4.dll:$CmdTcID [64]
  773. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_5.dll:$CmdTcID [64]
  774. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_6.dll:$CmdTcID [64]
  775. AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
  776. AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_1.dll:$CmdTcID [64]
  777. AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_2.dll:$CmdTcID [64]
  778. AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_3.dll:$CmdTcID [64]
  779. AlternateDataStreams: C:\WINDOWS\SysWOW64\xolehlp.dll:$CmdTcID [130]
  780. AlternateDataStreams: C:\WINDOWS\SysWOW64\zipfldr.dll:$CmdTcID [64]
  781. AlternateDataStreams: C:\WINDOWS\system32\Drivers\AcpiCtlDrv.sys:$CmdTcID [64]
  782. AlternateDataStreams: C:\WINDOWS\system32\Drivers\afd.sys:$CmdTcID [64]
  783. AlternateDataStreams: C:\WINDOWS\system32\Drivers\ahcache.sys:$CmdTcID [64]
  784. AlternateDataStreams: C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys:$CmdTcID [64]
  785. AlternateDataStreams: C:\WINDOWS\system32\Drivers\anvsnddrv.sys:$CmdTcID [64]
  786. AlternateDataStreams: C:\WINDOWS\system32\Drivers\bowser.sys:$CmdTcID [64]
  787. AlternateDataStreams: C:\WINDOWS\system32\Drivers\capimg.sys:$CmdTcID [64]
  788. AlternateDataStreams: C:\WINDOWS\system32\Drivers\clfs.sys:$CmdTcID [64]
  789. AlternateDataStreams: C:\WINDOWS\system32\Drivers\crashdmp.sys:$CmdTcID [64]
  790. AlternateDataStreams: C:\WINDOWS\system32\Drivers\dfx11_1x64.sys:$CmdTcID [64]
  791. AlternateDataStreams: C:\WINDOWS\system32\Drivers\dfx12x64.sys:$CmdTcID [64]
  792. AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4.sys:$CmdTcID [64]
  793. AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4usb.sys:$CmdTcID [64]
  794. AlternateDataStreams: C:\WINDOWS\system32\Drivers\dtlitescsibus.sys:$CmdTcID [130]
  795. AlternateDataStreams: C:\WINDOWS\system32\Drivers\dumpsd.sys:$CmdTcID [64]
  796. AlternateDataStreams: C:\WINDOWS\system32\Drivers\fastfat.sys:$CmdTcID [64]
  797. AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidclass.sys:$CmdTcID [64]
  798. AlternateDataStreams: C:\WINDOWS\system32\Drivers\htcnprot.sys:$CmdTcID [64]
  799. AlternateDataStreams: C:\WINDOWS\system32\Drivers\HtcVComV64.sys:$CmdTcID [64]
  800. AlternateDataStreams: C:\WINDOWS\system32\Drivers\http.sys:$CmdTcID [64]
  801. AlternateDataStreams: C:\WINDOWS\system32\Drivers\ICCWDT.sys:$CmdTcID [64]
  802. AlternateDataStreams: C:\WINDOWS\system32\Drivers\igdkmd64.sys:$CmdTcID [64]
  803. AlternateDataStreams: C:\WINDOWS\system32\Drivers\IntcDAud.sys:$CmdTcID [130]
  804. AlternateDataStreams: C:\WINDOWS\system32\Drivers\intelaud.sys:$CmdTcID [64]
  805. AlternateDataStreams: C:\WINDOWS\system32\Drivers\iorate.sys:$CmdTcID [64]
  806. AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetbus64.sys:$CmdTcID [130]
  807. AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys:$CmdTcID [130]
  808. AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetmodem64.sys:$CmdTcID [64]
  809. AlternateDataStreams: C:\WINDOWS\system32\Drivers\MegaSas2i.sys:$CmdTcID [64]
  810. AlternateDataStreams: C:\WINDOWS\system32\Drivers\modem.sys:$CmdTcID [64]
  811. AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxdav.sys:$CmdTcID [64]
  812. AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb10.sys:$CmdTcID [130]
  813. AlternateDataStreams: C:\WINDOWS\system32\Drivers\ndisrd.sys:$CmdTcID [64]
  814. AlternateDataStreams: C:\WINDOWS\system32\Drivers\revoflt.sys:$CmdTcID [64]
  815. AlternateDataStreams: C:\WINDOWS\system32\Drivers\rt640x64.sys:$CmdTcID [64]
  816. AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdbus.sys:$CmdTcID [64]
  817. AlternateDataStreams: C:\WINDOWS\system32\Drivers\SIVX64.sys:$CmdZnID [26]
  818. AlternateDataStreams: C:\WINDOWS\system32\Drivers\srv2.sys:$CmdTcID [64]
  819. AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudbus.sys:$CmdTcID [64]
  820. AlternateDataStreams: C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [130]
  821. AlternateDataStreams: C:\WINDOWS\system32\Drivers\tm.sys:$CmdTcID [64]
  822. AlternateDataStreams: C:\WINDOWS\system32\Drivers\tpm.sys:$CmdTcID [64]
  823. AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbaapl64.sys:$CmdTcID [64]
  824. AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbscan.sys:$CmdTcID [64]
  825. AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxDrv.sys:$CmdTcID [64]
  826. AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetAdp.sys:$CmdTcID [64]
  827. AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetAdp6.sys:$CmdTcID [64]
  828. AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetLwf.sys:$CmdTcID [64]
  829. AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys:$CmdTcID [64]
  830. AlternateDataStreams: C:\ProgramData\TEMP:3E7908F7 [292]
  831. AlternateDataStreams: C:\Users\Tomasz\Desktop\AlbumArtSmall.jpg:$CmdZnID [26]
  832.  
  833. ==================== Tryb awaryjny (filtrowane) ===================
  834.  
  835. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)
  836.  
  837. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
  838. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
  839.  
  840. ==================== Powiązania plików (filtrowane) ===============
  841.  
  842. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
  843.  
  844.  
  845. ==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
  846.  
  847. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
  848.  
  849. IE restricted site: HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\skype.com -> hxxps://apps.skype.com
  850.  
  851. ==================== Hosts - zawartość: ===============================
  852.  
  853. (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
  854.  
  855. 2013-08-22 15:25 - 2017-04-20 09:18 - 00000876 ____A C:\WINDOWS\system32\Drivers\etc\hosts
  856.  
  857.  
  858. ==================== Inne obszary ============================
  859.  
  860. (Obecnie brak automatycznej naprawy dla tej sekcji.)
  861.  
  862. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\Control Panel\Desktop\\Wallpaper -> d:\foty & tapety\_wallpapers_\(tapeta) forest_stairs_2560x1440.jpg
  863. DNS Servers: 62.179.1.62 - 62.179.1.63
  864. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  865. Zapora systemu Windows [funkcja włączona]
  866.  
  867. ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
  868.  
  869. HKLM\...\StartupApproved\Run: => "iTunesHelper"
  870. HKLM\...\StartupApproved\Run: => "Classic Start Menu"
  871. HKLM\...\StartupApproved\Run32: => "Live Update"
  872. HKLM\...\StartupApproved\Run32: => "IMSS"
  873. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\StartupFolder: => "Wysyłanie do programu OneNote.lnk"
  874. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "Spotify Web Helper"
  875. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "uTorrent"
  876. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "Spotify"
  877. HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
  878.  
  879. ==================== Reguły Zapory systemu Windows (filtrowane) ===============
  880.  
  881. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  882.  
  883. FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
  884. FirewallRules: [{9C6943A1-4955-46C7-816D-5408047CC2B1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  885. FirewallRules: [{E2C7BD7C-4E90-4F2A-BD47-665AF8071D4A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  886. FirewallRules: [{98212590-61B8-49DD-95E7-227D233117A7}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
  887. FirewallRules: [{30E4E9DD-FB69-4C41-9268-E8EFEA256CD3}] => (Block) C:\Windows\explorer.exe
  888. FirewallRules: [{BEE20941-8707-4EED-ADA9-CF007AF9D122}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
  889. FirewallRules: [{217C8CC4-F3E5-42C7-ABA0-CF1C75D4E572}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
  890. FirewallRules: [{3AA6E719-8A74-4F58-B445-5DFB7704CE61}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
  891. FirewallRules: [{D6796E36-9623-47AD-A26F-0458861E74AC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
  892. FirewallRules: [{7A2E3A1F-761F-4417-9143-5F6D86DF92BE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
  893. FirewallRules: [{BD905E00-86E4-4690-8E97-B9528D0D215A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
  894. FirewallRules: [{6E7613FB-3145-441A-938C-1DA29DA85643}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
  895. FirewallRules: [{CAC3A6D7-3F7F-434E-AA31-2C2DDD9CE602}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
  896. FirewallRules: [{0BBD2B6B-E844-467A-AE2C-A893B69A7395}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
  897. FirewallRules: [{C122EBD1-4051-4097-A908-FAC3C39B6D7A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
  898. FirewallRules: [{F41EAA47-F8C5-4149-A431-E4B4AA83BB8C}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
  899. FirewallRules: [{B798DD8D-44CA-438E-8587-529E4F25F56C}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
  900. FirewallRules: [TCP Query User{B346653A-1535-41DA-86E8-DA7C857C2886}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
  901. FirewallRules: [UDP Query User{4738EA55-D933-4F1D-B99D-36E3CA1B8DA7}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
  902. FirewallRules: [{586BFA93-8F87-4EC6-A4CA-55F8C608C60E}] => (Allow) LPort=1689
  903. FirewallRules: [{4B9D033E-3089-4D1E-8EF9-2B9717E8AAAF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  904. FirewallRules: [{EBE2ED08-D11D-4B25-AF2F-6C4AAA5287CA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  905. FirewallRules: [{09CD1A2D-9646-49C3-8DE7-D6A31D2FB061}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
  906. FirewallRules: [{62D8567F-2BC9-49E7-BCBE-74416EDA59B8}] => (Allow) LPort=2869
  907. FirewallRules: [{3FBB3A54-68BA-47B1-8C05-699152369D9F}] => (Allow) LPort=1900
  908. FirewallRules: [TCP Query User{C0FD7995-543C-41DC-880C-D43146BA3A66}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
  909. FirewallRules: [UDP Query User{66A91B86-8C2B-4DF5-B1C5-846B2195F76A}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
  910. FirewallRules: [{07964503-E82A-4A4D-947C-1BE59C2EBAEC}] => (Allow) C:\Users\Tomasz\AppData\Local\Chromium\Application\chrome.exe
  911. FirewallRules: [TCP Query User{3FF20D39-9072-4FD4-AE5E-F74527EBA0B1}D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe] => (Allow) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
  912. FirewallRules: [UDP Query User{73D3239B-73B1-46DB-A828-ADE7643DD4FD}D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe] => (Allow) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
  913. FirewallRules: [{040EE9B8-1269-416F-B821-C779A2027EB1}] => (Block) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
  914. FirewallRules: [{BDF085AB-FD97-4E1C-9F9C-181E2A226BD2}] => (Block) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
  915. FirewallRules: [{7CF42105-CA6E-4118-A5B6-CCE3E35A0598}] => (Allow) C:\Program Files\iTunes\iTunes.exe
  916. FirewallRules: [TCP Query User{F6EDFB10-F299-4EC2-9E4A-F885B8837DAB}E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe] => (Allow) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
  917. FirewallRules: [UDP Query User{46188EE3-AD51-4B2B-938B-09A65C9468BA}E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe] => (Allow) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
  918. FirewallRules: [{36230BC9-A7FE-4751-9DEF-8E338991619B}] => (Block) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
  919. FirewallRules: [{723FEB6D-9D80-4E9C-A1F7-5CC2CFFC94A8}] => (Block) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
  920. FirewallRules: [{FABD9E2B-C996-4DCF-AB02-3BE1D56B4F13}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  921. FirewallRules: [{44894732-EF64-4421-A848-49C7467C31A4}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
  922. FirewallRules: [{6337B930-8476-496B-B38F-223176E934A6}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
  923. FirewallRules: [{C41FF5E4-5C9A-42B3-865D-3A8A674A1019}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
  924. FirewallRules: [{7984B87F-9ED6-4151-A499-F2E699247248}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
  925. FirewallRules: [{C7C4506E-A555-4B34-A82D-AA6F3A6A6772}] => (Allow) LPort=1688
  926. FirewallRules: [{AC5E7A57-1906-4672-B21D-59E50B169C6D}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  927.  
  928. ==================== Punkty Przywracania systemu =========================
  929.  
  930. 20-04-2017 10:11:16 Removed Bonjour
  931. 20-04-2017 11:26:23 Installed Microsoft Office Professional Plus 2016
  932. 20-04-2017 11:26:53 PROPLUS
  933.  
  934. ==================== Wadliwe urządzenia w Menedżerze urządzeń =============
  935.  
  936. Name:
  937. Description:
  938. Class Guid:
  939. Manufacturer:
  940. Service:
  941. Problem: : The drivers for this device are not installed. (Code 28)
  942. Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
  943.  
  944.  
  945. ==================== Błędy w Dzienniku zdarzeń: =========================
  946.  
  947. Dziennik Aplikacja:
  948. ==================
  949. Error: (04/21/2017 01:28:28 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
  950. Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
  951. w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
  952. w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
  953. w System.ServiceProcess.ServiceBase.DeferredStop()
  954.  
  955. Error: (04/21/2017 12:58:25 AM) (Source: Application Error) (EventID: 1000) (User: )
  956. Description: Nazwa aplikacji powodującej błąd: MSI_LiveUpdate_Service.exe, wersja: 1.0.0.37, sygnatura czasowa: 0x582449b8
  957. Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.14393.479, sygnatura czasowa: 0x58256ca0
  958. Kod wyjątku: 0xc0000374
  959. Przesunięcie błędu: 0x000d9d11
  960. Identyfikator procesu powodującego błąd: 0x99c
  961. Godzina uruchomienia aplikacji powodującej błąd: 0x01d2ba2565503b49
  962. Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
  963. Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll
  964. Identyfikator raportu: 941f5669-ad07-4f44-948a-e28ae01c7375
  965. Pełna nazwa pakietu powodującego błąd:
  966. Identyfikator aplikacji względem pakietu powodującego błąd:
  967.  
  968. Error: (04/20/2017 12:33:18 PM) (Source: Application Error) (EventID: 1000) (User: )
  969. Description: Nazwa aplikacji powodującej błąd: MSI_LiveUpdate_Service.exe, wersja: 1.0.0.37, sygnatura czasowa: 0x582449b8
  970. Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.14393.479, sygnatura czasowa: 0x58256ca0
  971. Kod wyjątku: 0xc0000374
  972. Przesunięcie błędu: 0x000d9d11
  973. Identyfikator procesu powodującego błąd: 0x984
  974. Godzina uruchomienia aplikacji powodującej błąd: 0x01d2b9ba7500041a
  975. Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
  976. Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll
  977. Identyfikator raportu: 37951522-5fe3-400d-8a26-47ea148ab8f0
  978. Pełna nazwa pakietu powodującego błąd:
  979. Identyfikator aplikacji względem pakietu powodującego błąd:
  980.  
  981. Error: (04/20/2017 11:43:06 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
  982. Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
  983. w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
  984. w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
  985. w System.ServiceProcess.ServiceBase.DeferredStop()
  986.  
  987. Error: (04/20/2017 11:27:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
  988. Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
  989.  
  990. Details:
  991. AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
  992.  
  993. System Error:
  994. Odmowa dostępu.
  995. .
  996.  
  997. Error: (04/20/2017 11:26:26 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
  998. Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
  999.  
  1000. Details:
  1001. AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
  1002.  
  1003. System Error:
  1004. Odmowa dostępu.
  1005. .
  1006.  
  1007. Error: (04/20/2017 10:22:47 AM) (Source: VSS) (EventID: 8193) (User: )
  1008. Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury QueryFullProcessImageNameW. hr = 0x8007001f, Urządzenie dołączone do komputera nie działa.
  1009. .
  1010.  
  1011.  
  1012. Operacja:
  1013. Wykonywanie operacji asynchronicznej
  1014.  
  1015. Kontekst:
  1016. Stan bieżący: DoSnapshotSet
  1017.  
  1018. Error: (04/20/2017 10:22:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
  1019. Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
  1020.  
  1021. Details:
  1022. AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
  1023.  
  1024. System Error:
  1025. Odmowa dostępu.
  1026. .
  1027.  
  1028. Error: (04/20/2017 10:22:32 AM) (Source: VSS) (EventID: 8194) (User: )
  1029. Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu.
  1030. .
  1031. To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym.
  1032.  
  1033.  
  1034. Operacja:
  1035. Zbieranie danych modułu zapisującego
  1036.  
  1037. Kontekst:
  1038. Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}
  1039. Nazwa modułu zapisującego: System Writer
  1040. Identyfikator wystąpienia modułu zapisującego: {bc5482d0-06ed-4668-a715-b457f1e98ef6}
  1041.  
  1042. Error: (04/20/2017 10:19:42 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
  1043. Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
  1044. w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
  1045. w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
  1046. w System.ServiceProcess.ServiceBase.DeferredStop()
  1047.  
  1048.  
  1049. Dziennik System:
  1050. =============
  1051. Error: (04/21/2017 12:58:25 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
  1052. Description: Usługa MSI Live Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
  1053.  
  1054. Error: (04/21/2017 12:32:23 AM) (Source: DCOM) (EventID: 10010) (User: HOMEPC)
  1055. Description: Serwer {37998346-3765-45B1-8C66-AA88CA6B20B8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
  1056.  
  1057. Error: (04/21/2017 12:30:23 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
  1058. Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
  1059. Nieokreślony błąd.
  1060.  
  1061. Error: (04/21/2017 12:30:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
  1062. Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
  1063. Nieokreślony błąd.
  1064.  
  1065. Error: (04/21/2017 12:22:32 AM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
  1066. Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
  1067. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  1068. i identyfikatorem aplikacji APPID
  1069. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  1070. użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
  1071.  
  1072. Error: (04/21/2017 12:19:11 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
  1073. Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x8024200d: Aktualizacja funkcji dla systemu Windows 10, wersja 1703.
  1074.  
  1075. Error: (04/21/2017 12:11:55 AM) (Source: DCOM) (EventID: 10010) (User: HOMEPC)
  1076. Description: Serwer {37998346-3765-45B1-8C66-AA88CA6B20B8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
  1077.  
  1078. Error: (04/21/2017 12:11:00 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
  1079. Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
  1080. Nieokreślony błąd.
  1081.  
  1082. Error: (04/21/2017 12:09:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
  1083. Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
  1084. Nieokreślony błąd.
  1085.  
  1086. Error: (04/20/2017 07:42:18 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
  1087. Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
  1088. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  1089. i identyfikatorem aplikacji APPID
  1090. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  1091. użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
  1092.  
  1093.  
  1094. CodeIntegrity:
  1095. ===================================
  1096. Date: 2017-04-20 09:18:22.901
  1097. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  1098.  
  1099. Date: 2017-04-20 09:06:26.478
  1100. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  1101.  
  1102. Date: 2017-04-20 00:49:46.897
  1103. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1104.  
  1105. Date: 2017-04-20 00:49:04.785
  1106. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1107.  
  1108. Date: 2017-04-20 00:46:57.039
  1109. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1110.  
  1111. Date: 2017-04-20 00:45:54.606
  1112. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1113.  
  1114. Date: 2017-04-20 00:43:19.611
  1115. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1116.  
  1117. Date: 2017-04-20 00:42:30.593
  1118. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1119.  
  1120. Date: 2017-04-20 00:38:16.323
  1121. Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  1122.  
  1123. Date: 2017-04-20 00:37:49.816
  1124. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
  1125.  
  1126.  
  1127.  
  1128.  
  1129. ==================== Koniec Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement