Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 20-04-2017
- Uruchomiony przez Tomasz (21-04-2017 02:00:58)
- Uruchomiony z C:\Users\Tomasz\Desktop
- Windows 10 Pro Wersja 1607 (X64) (2016-10-07 23:36:28)
- Tryb startu: Normal
- ==========================================================
- ==================== Konta użytkowników: =============================
- Administrator (S-1-5-21-527838218-3068815736-2189815317-500 - Administrator - Disabled)
- Gość (S-1-5-21-527838218-3068815736-2189815317-501 - Limited - Disabled)
- HomeGroupUser$ (S-1-5-21-527838218-3068815736-2189815317-1003 - Limited - Enabled)
- Konto domyślne (S-1-5-21-527838218-3068815736-2189815317-503 - Limited - Disabled)
- Tomasz (S-1-5-21-527838218-3068815736-2189815317-1001 - Administrator - Enabled) => C:\Users\Tomasz
- wrwriogkrg (S-1-5-21-527838218-3068815736-2189815317-1004 - Limited - Disabled)
- ==================== Centrum zabezpieczeń ========================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie.)
- AV: COMODO Antivirus (Enabled - Up to date) {D0CC7563-ABD2-DEBE-138E-FDD553335AF2}
- AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Comodo Defense+ (Enabled - Up to date) {6BAD9487-8DE8-D130-293E-C6A728B4104F}
- AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- FW: COMODO Firewall (Enabled) {E8F7F446-E1BD-DFE6-38D1-54E0ADE01D89}
- ==================== Zainstalowane programy ======================
- (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
- 4K YouTube to MP3 3.1 (HKLM-x32\...\4K YouTube to MP3_is1) (Version: 3.1.1.1707 - Open Media LLC)
- 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
- abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - )
- Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)
- Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
- AIMP (HKLM-x32\...\AIMP) (Version: v4.13.1893, 07.04.2017 - AIMP DevTeam)
- Any Video Converter 6.0.9 (HKLM-x32\...\Any Video Converter) (Version: 6.0.9 - Anvsoft)
- Apple Application Support (32-bit) (HKLM-x32\...\{05E07D23-91E9-4E70-A4CC-EF505088F967}) (Version: 5.4.1 - Apple Inc.)
- Apple Application Support (64-bit) (HKLM\...\{741291DA-2B34-4D44-8FB6-58EDE21261D8}) (Version: 5.4.1 - Apple Inc.)
- Apple Mobile Device Support (HKLM\...\{DB18F1C0-846F-46F5-A074-5B97C8AF5C8E}) (Version: 10.3.1.2 - Apple Inc.)
- Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
- BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
- CCleaner (HKLM\...\CCleaner) (Version: 5.29 - Piriform)
- ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl)
- Chromium (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Chromium) (Version: 56.0.2924.76 - Chromium)
- Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
- CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
- D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
- DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.0.0.0054 - Disc Soft Ltd)
- Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
- Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
- DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
- DFX (HKLM-x32\...\DFX) (Version: 12.010.0.0 - Power Technology)
- DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
- DoNotSpy10 (HKLM-x32\...\{32D066BD-F94C-4948-8FA8-84653EE9617E}_is1) (Version: 1.2.0.1 - pXc-coding.com)
- Dropbox (HKLM-x32\...\Dropbox) (Version: 24.4.16 - Dropbox, Inc.)
- Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
- EaseUS Partition Master 11.9 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
- ESET Smart Security (HKLM\...\{4381D174-1253-459D-96C1-50F37EF92330}) (Version: 10.1.204.1 - ESET, spol. s r.o.)
- EZ CD Audio Converter 5.5.0.1 (HKLM\...\EZ CD Audio Converter_is1) (Version: 5.5.0.1 - Poikosoft)
- F2200 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
- Football Manager 2016 (HKLM-x32\...\Football Manager 2016_is1) (Version: - )
- Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.2.1.6871 - Foxit Software Inc.)
- Franz (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Franz) (Version: 4.0.4 - Franz)
- Free MP3 Ringtone Maker 2.3 (HKLM-x32\...\Free MP3 Ringtone Maker_is1) (Version: - musetips.com)
- Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
- Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
- Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
- GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
- HP Deskjet F2200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{60D6AAC5-FDC1-49BA-867B-3135F4726156}) (Version: 14.0 - HP)
- HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
- HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
- HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
- HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
- HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
- HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.69.5 - HTC)
- ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
- Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
- Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
- Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
- Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
- IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
- IrfanView 64 (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
- IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
- iTunes (HKLM\...\{164600BE-9CEC-44E6-9B38-2B12D5FE2342}) (Version: 12.6.0.100 - Apple Inc.)
- Java 8 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418040F0}) (Version: 8.0.400 - Oracle Corporation)
- KeePass Password Safe 2.35 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.35 - Dominik Reichl)
- LameXP v4.14 (HKLM-x32\...\{FBD7A67D-D700-4043-B54F-DD106D00F308}) (Version: 4.14 Final-1 [Build #1934] - LoRd_MuldeR <mulder2@gmx.de>)
- LEGO Digital Designer (HKLM-x32\...\New LEGO Digital Designer) (Version: - LEGO A/S)
- Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
- Microsoft OneDrive (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
- Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
- Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - )
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: - )
- Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.0.6263 - Mozilla)
- Mozilla Thunderbird 52.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 52.0 (x86 pl)) (Version: 52.0 - Mozilla)
- Mp3tag v2.81b (HKLM-x32\...\Mp3tag) (Version: 2.81b - Florian Heidenreich)
- MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.06 - MSI)
- MSI(R) Intel(R) Extreme Tuning Utility (HKLM-x32\...\{482c7431-75e2-4124-a453-6a294cd2c6a4}) (Version: 6.0.2.101 - Intel Corporation)
- MSI(R) Intel(R) Extreme Tuning Utility (x32 Version: 6.0.2.101 - Intel Corporation) Hidden
- MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
- MultiCommander (x64) (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\MultiCommander x64) (Version: 6.9.0.2303 - Mathias Svensson)
- Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
- Navigator 16 - Setup Utility 16.0.3-1 (HKLM-x32\...\MAPFACTOR_SETUP_UTILITY_HYBRID_16_is1) (Version: 16.0.3-1 - MapFactor s.r.o)
- OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
- Oprogramowanie mikroukładu Intel® (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
- Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
- Painkiller Black Edition (HKLM-x32\...\Painkiller Black Edition) (Version: - )
- Pakiet sterowników systemu Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
- PeaZip 6.4.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.4.0 - Giorgio Tani)
- PeaZip configuration (WIN64) (HKLM\...\{4F8D60A8-C53D-47BD-AE5C-31AE6566D638}_is1) (Version: - Giorgio Tani)
- PeaZip UNRAR5 plugin 1 (HKLM\...\{00DF53E1-B1C8-4D24-9CA7-62816EA88814}_is1) (Version: - Giorgio Tani)
- Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
- Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
- Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7806 - Realtek Semiconductor Corp.)
- Revo Uninstaller Pro 3.1.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.8 - VS Revo Group, Ltd.)
- Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
- SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
- Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
- Spotify (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\Spotify) (Version: 1.0.50.41368.gbd68dbef - Spotify AB)
- Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
- Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
- TagScanner 6.0.18 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov)
- TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
- TIDAL (HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\TIDAL) (Version: 2.1.5 - TIDAL Music AS)
- Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
- Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0 - Ghisler Software GmbH)
- Total Commander wersja 9.0 (HKLM\...\Total Commander_is1) (Version: 9.0 - )
- Total Uninstall 6.18.0 (HKLM\...\Total Uninstall 6_is1) (Version: 6.18.0 - Gavrila Martau)
- Transcend SSD Scope版本3.4.0 (HKLM-x32\...\{AD8E7B8B-EAD8-4B9F-882E-7970ABFACE34}_is1) (Version: 3.4.0 - Transcend Information, Inc.)
- Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
- Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
- VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
- WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
- Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
- Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
- ==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- ==================== Zaplanowane zadania (filtrowane) =============
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- Task: {038D8026-B414-4372-96FE-9F1C724D6B61} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
- Task: {0B23FF0E-1A8A-4036-AC70-4A675E1027D4} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA
- Task: {14EE5194-47D8-49B6-AF33-4083101F1E4D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
- Task: {1F1BE6BB-952D-4E83-A2B1-730E6231F6D3} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
- Task: {257B361C-1127-42C6-9C88-8485F0C49AB5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA
- Task: {2946D48B-83B5-41B7-8F77-933274006E8A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-10-09] (Intel Corporation)
- Task: {2B88EF2A-02E0-4138-8791-61B083857E38} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Tomasz\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
- Task: {302F874E-BDA3-43EA-BB65-9A6B597B1822} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA
- Task: {34AACEDD-4B72-461E-972A-EC8646790DF5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-06] (Dropbox, Inc.)
- Task: {5938003B-5151-4A06-A04B-3F19A1E97636} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA
- Task: {6DCA1C84-1B99-430E-A205-D7243D3361B0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA
- Task: {6E85828D-6208-48AE-9705-AAA686E9B07E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
- Task: {7363F01C-BDEA-49BA-AFA0-488EB84CCE32} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA
- Task: {74959621-CD06-42F7-8CB1-0E34B73F4A23} - \WPD\SqmUpload_S-1-5-21-527838218-3068815736-2189815317-1001 -> Brak pliku <==== UWAGA
- Task: {75973B69-B4A8-4EEC-B8A3-62861D66CA68} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
- Task: {768210BF-9776-40E2-B1B5-62A30B763AF2} - \Launch HTC Sync Loader -> Brak pliku <==== UWAGA
- Task: {7CE36AC4-3269-4D43-B176-6E96FD465C08} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA
- Task: {994AE0A4-D7FD-448F-B858-856993C0A764} - \Wise Care 365 -> Brak pliku <==== UWAGA
- Task: {9A4B8DE7-D04B-40D8-B081-09B8F40E06E0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-06] (Dropbox, Inc.)
- Task: {A5B0E09C-9D8B-4A8F-9FD7-419130D969AC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
- Task: {A9526177-6196-4512-9F35-971B8749D66A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-10-09] (Intel Corporation)
- Task: {AD72C14C-CD2A-4FD8-BED2-34EE0F61F70D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA
- Task: {ADCFDC91-C05C-422B-BFF2-0DE61EDBC79F} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2015-12-31] (Intel Corporation)
- Task: {BA068CD7-C757-4D12-B3C1-C29B6373C550} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
- Task: {BA14AC77-D64E-4E23-A549-27E8D101086F} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic
- Task: {C49C764C-C941-48D7-BF0B-DCE2A614B50C} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
- Task: {CFFD98AB-8A7C-4EF8-91F4-C0C1B4EFFD46} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA
- Task: {D00D5C25-99D7-4F13-93D7-5ABFC142EB3F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_127_pepper.exe [2017-03-18] (Adobe Systems Incorporated)
- Task: {F36B6219-3C53-49DD-BD56-133FFB61C5BF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA
- Task: {FC5BAA1B-E644-4231-87DD-620E18B4C2E2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-04-11] (Piriform Ltd)
- (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
- Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
- Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
- Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
- Task: C:\WINDOWS\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
- ==================== Skróty =============================
- (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
- ShortcutWithArgument: C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Pixlr Touch Up (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData --app-id=jklljiahjgoglchglekebfljnmbaleig
- ==================== Załadowane moduły (filtrowane) ==============
- 2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
- 2017-04-12 23:47 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
- 2017-04-20 11:31 - 2016-07-17 13:05 - 00014464 _____ () C:\ProgramData\KMSAuto\bin\TunMirror2.exe
- 2017-04-12 23:47 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
- 2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
- 2016-10-08 02:23 - 2016-10-08 02:23 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
- 2017-03-16 13:18 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
- 2017-03-16 13:18 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
- 2017-03-16 13:18 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2017-03-16 13:18 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
- 2017-04-12 23:47 - 2017-03-28 07:08 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
- 2017-04-12 23:47 - 2017-03-28 07:11 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
- 2015-10-21 15:18 - 2016-04-16 09:55 - 01325240 _____ () C:\Program Files (x86)\DFX\DFX.exe
- 2015-10-21 15:10 - 2015-11-27 21:05 - 00132280 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
- 2015-10-21 15:14 - 2015-11-27 21:05 - 00133304 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
- 2015-10-21 15:46 - 2015-11-27 21:05 - 00049848 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared64.dll
- 2017-04-20 11:28 - 2017-04-19 07:03 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libglesv2.dll
- 2017-04-20 11:28 - 2017-04-19 07:03 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libegl.dll
- 2015-10-21 15:42 - 2015-11-27 21:05 - 00050872 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared32.dll
- 2017-04-20 19:14 - 2017-04-17 17:09 - 00870720 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00020824 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 01729360 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00060736 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00038712 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00246608 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
- 2017-04-20 19:14 - 2017-03-29 01:55 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 01826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
- 2017-04-20 19:14 - 2017-03-29 01:54 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 01972024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 03928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
- 2017-04-20 19:14 - 2017-03-29 01:56 - 00349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
- 2017-04-20 19:14 - 2017-04-17 17:14 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
- 2017-04-20 19:14 - 2017-03-29 01:52 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
- 2017-04-20 19:14 - 2017-03-22 23:21 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00084288 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
- 2017-04-20 19:14 - 2017-03-29 02:00 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
- 2017-04-20 19:14 - 2017-03-29 02:00 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
- 2017-04-20 19:14 - 2017-04-17 17:13 - 00546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
- 2017-04-21 00:44 - 2017-04-21 00:44 - 00018944 _____ () D:\UserTemp\Temp\WPLFE12.tmp\ml_online.lng
- 2017-04-21 00:44 - 2017-04-21 00:44 - 00035328 _____ () D:\UserTemp\Temp\WPLFE12.tmp\ombrowser.lng
- ==================== Alternate Data Streams (filtrowane) =========
- (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
- AlternateDataStreams: C:\WINDOWS\acpimof.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\splwow64.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\unvise32.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\WLXPGSS.SCR:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ActionCenter.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ActionCenterCPL.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ActivationManager.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\adsmsext.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\aitstatic.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\AppCapture.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\AppxPackaging.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\AudioSrvPolicyManager.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\autoplay.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\bcastdvr.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\BcastDVRHelper.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\bcdedit.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\bcrypt.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\BluetoothApis.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\BootMan.exe:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\browserbroker.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\BthRadioMedia.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\cdd.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\cdpsvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\cdpusersvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\chartv.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\CloudStorageWizard.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\cmifw.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\comdlg32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\common_clang64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\CPFilters.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\credprovs.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\crypt32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\cryptngc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\d3d10warp.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\d3d9.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\d3dx10_42.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\d3dx11_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\d3dx9_32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\D3DX9_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dab.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dafBth.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DeviceCenter.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DeviceEnroller.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DeviceFlows.DataModel.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DevicePairingFolder.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DeviceReactivation.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dfp.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DfpCommon.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dialserver.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\difx64.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Display.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dmenrollengine.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DolbyDecMFT.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\dpapisrv.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DPTopologyApp.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\DPTopologyAppv2_0.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\drvstore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\dsreg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EAMProgressHandler.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EditBufferTestHook.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeHelper.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EditionUpgradeManagerObj.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EDPCleanup.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\efsext.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EncDec.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\energy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\epmntdrv.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\ErrorDetailsUpdate.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\esent.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\esentutl.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\EuEpmGdi.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\EuGdiDrv.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\facecredentialprovider.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\fhcpl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\fontext.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\FSClient.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\fveapi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\GfxResources.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\GfxUIEx.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Gfxv2_0.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Gfxv4_0.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\GlobCollationHost.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\hpotscl1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\hpotscl6.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\hpovst15.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\hpowiav1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\hpowiax7.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\hppldcoi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\HttpsDataSource.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\IdCtrls.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\iepeers.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ieproxy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ig75icd64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igc64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igd10idpp64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igd11dxva64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igd12umd64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdail64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdbcl64.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\igdde64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdfcl64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdmcl64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdmd64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdrcl64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igdumdim64.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\igfx11cmrt64.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\igfxcmjit64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxcmrt64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxCoIn_v4531.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxCPL.cpl:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxCUIServicePS.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxDHLib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxDHLibv2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxDILib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxDILibv2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxEMLib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxEMLibv2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxexps.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxext.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxLHMLib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxLHMLibv2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxSDK.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxSDKLib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\igfxSDKLibv2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\iglhcp64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\iglhsip64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\InputLocaleManager.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\IntelCpHDCPSvc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\IntelOpenCL64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\IntelWiDiMCComp64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\IntelWiDiUMS64.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\iscsiwmi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\java.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\javaw.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\javaws.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\JpMapControl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ListSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\LocationFramework.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\lpremove.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\lsm.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MapControlCore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MapsBtSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MDMAppInstaller.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\mdmregistration.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\mfaudiocnv.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\mfksproxy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\mfps.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\mfsensorgroup.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\microsoft-windows-system-events.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\migisol.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\moshostcore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MosStorage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MrmCoreR.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MRT.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\msdtcprx.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\msdtcuiu.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\msi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\msinfo32.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\MSVidCtl.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\msvproc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ncsi.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\netplwiz.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetSetupApi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetSetupEngine.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetSetupShim.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetSetupSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetworkDesktopSettings.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetworkMobileSettings.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NetworkUXBroker.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ngccredprov.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NgcCtnr.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ngcsvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\nlasvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NMAA.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NotificationController.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\NPSM.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\offreg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\OnDemandConnRouteHelper.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\OpenCL.DLL:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\pcasvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\PortChanger.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\powercfg.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\PresentationNative_v0300.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ProvSysprep.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\PsmServiceExtHost.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\qmgr.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\rasapi32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ReAgentc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\RemoteNaturalLanguage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\ReportingCSP.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\RjvMDMConfig.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\RtNicProp64.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\RTWorkQ.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\sendmail.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\services.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\setupempdrvx64.exe:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\setupugc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\shdocvw.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\SndVolSSO.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\sppnp.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\sppsvc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\sppwinob.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\sspicli.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\StorSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\SyncCenter.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\taskbarcpl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\timedate.cpl:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\TpmTasks.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\TSpkg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\TsWpfWrp.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\twinui.pcshell.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\UIAnimation.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\UIAutomationCore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\umpoext.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\usbaaplrc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\user32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\UtcResources.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\VEStoreEventHandlers.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Vestris.ResourceLib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\VPNv2CSP.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wc_storage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01007.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01009.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\weretw.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wifitask.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wincorlib.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.StateRepository.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wininetlui.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WinUSBCoInstaller.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WinUSBCoInstaller2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wkssvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wlidsvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wmpdxm.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wmpeffects.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wmpshell.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WordBreakers.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WpcRefreshTask.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WpcTok.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wpnprv.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wpx.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wscinterop.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wscsvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wsecedit.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WSManHTTPConfig.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\WsmSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\wu.upgrade.ps.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\xactengine2_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\xactengine3_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\XAudio2_7.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\zipfldr.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ActionCenterCPL.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ActivationManager.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\adsmsext.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\AppCapture.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\AppxPackaging.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\AuthExt.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\autoplay.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\bcrypt.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\BluetoothApis.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\BootMan.exe:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\chartv.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\CloudStorageWizard.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\cmifw.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\combase.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\comctl32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\comdlg32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\common_clang32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\CPFilters.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\credprovs.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\crypt32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\cryptngc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d10warp.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d8.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3d9.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_35.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_36.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_38.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_41.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_42.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_42.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_35.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_36.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_37.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_38.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_39.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_40.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_41.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_42.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx11_42.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_37.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_38.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_39.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_40.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_41.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\DolbyDecMFT.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\drvstore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\dsreg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\dtdump.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\EditBufferTestHook.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\efsext.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\epmntdrv.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\esent.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\esentutl.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\EuEpmGdi.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\EuGdiDrv.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\FSClient.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\GlobCollationHost.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\iepeers.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ig75icd32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igc32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10idpp32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10iumd32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igd11dxva32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igd12umd32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdail32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdbcl32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdde32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdfcl32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdmcl32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdmd32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdrcl32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdumdim32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igdusc32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igfx11cmrt32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmjit32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmrt32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxexps32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhcp32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhsip32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\InputLocaleManager.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\IntelOpenCL32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\iscsiwmi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\JpMapControl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\MapControlCore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\MapsBtSvc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\mdmregistration.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\mfaudiocnv.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\mfksproxy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsensorgroup.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\migisol.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\MosStorage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\MrmCoreR.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\msi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\msinfo32.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\msvcr70.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\MSVidCtl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\msvproc.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupApi.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupEngine.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NetSetupShim.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ngccredprov.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NMAA.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\NPSM.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ntdll.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ntshrui.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\offreg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\opencl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\powercfg.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\rasapi32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\ReAgentc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\RTWorkQ.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\sendmail.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\setupempdrv03.exe:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\setupugc.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\SndVolSSO.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\sspicli.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\stobject.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\systemcpl.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\TSpkg.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAnimation.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\UIAutomationCore.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\user32.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\weretw.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wincorlib.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.StateRepository.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wininetlui.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpdxm.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpeffects.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wmpshell.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\WordBreakers.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wscinterop.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\wsecedit.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_4.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_6.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_7.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_0.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_4.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_5.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_6.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_1.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_2.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_3.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\xolehlp.dll:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\SysWOW64\zipfldr.dll:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\AcpiCtlDrv.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\afd.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\ahcache.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\anvsnddrv.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\bowser.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\capimg.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\clfs.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\crashdmp.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\dfx11_1x64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\dfx12x64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4usb.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\dtlitescsibus.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\dumpsd.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\fastfat.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidclass.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\htcnprot.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\HtcVComV64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\http.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\ICCWDT.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\igdkmd64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\IntcDAud.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\intelaud.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\iorate.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetbus64.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetmodem64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\MegaSas2i.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\modem.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxdav.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb10.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\ndisrd.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\revoflt.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\rt640x64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdbus.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\SIVX64.sys:$CmdZnID [26]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\srv2.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudbus.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [130]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\tm.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\tpm.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbaapl64.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbscan.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxDrv.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetAdp.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetAdp6.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxNetLwf.sys:$CmdTcID [64]
- AlternateDataStreams: C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys:$CmdTcID [64]
- AlternateDataStreams: C:\ProgramData\TEMP:3E7908F7 [292]
- AlternateDataStreams: C:\Users\Tomasz\Desktop\AlbumArtSmall.jpg:$CmdZnID [26]
- ==================== Tryb awaryjny (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
- ==================== Powiązania plików (filtrowane) ===============
- (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
- ==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
- IE restricted site: HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\skype.com -> hxxps://apps.skype.com
- ==================== Hosts - zawartość: ===============================
- (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
- 2013-08-22 15:25 - 2017-04-20 09:18 - 00000876 ____A C:\WINDOWS\system32\Drivers\etc\hosts
- ==================== Inne obszary ============================
- (Obecnie brak automatycznej naprawy dla tej sekcji.)
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\Control Panel\Desktop\\Wallpaper -> d:\foty & tapety\_wallpapers_\(tapeta) forest_stairs_2560x1440.jpg
- DNS Servers: 62.179.1.62 - 62.179.1.63
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- Zapora systemu Windows [funkcja włączona]
- ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
- HKLM\...\StartupApproved\Run: => "iTunesHelper"
- HKLM\...\StartupApproved\Run: => "Classic Start Menu"
- HKLM\...\StartupApproved\Run32: => "Live Update"
- HKLM\...\StartupApproved\Run32: => "IMSS"
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\StartupFolder: => "Wysyłanie do programu OneNote.lnk"
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "Spotify Web Helper"
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "uTorrent"
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "Spotify"
- HKU\S-1-5-21-527838218-3068815736-2189815317-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
- ==================== Reguły Zapory systemu Windows (filtrowane) ===============
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
- FirewallRules: [{9C6943A1-4955-46C7-816D-5408047CC2B1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{E2C7BD7C-4E90-4F2A-BD47-665AF8071D4A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{98212590-61B8-49DD-95E7-227D233117A7}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
- FirewallRules: [{30E4E9DD-FB69-4C41-9268-E8EFEA256CD3}] => (Block) C:\Windows\explorer.exe
- FirewallRules: [{BEE20941-8707-4EED-ADA9-CF007AF9D122}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
- FirewallRules: [{217C8CC4-F3E5-42C7-ABA0-CF1C75D4E572}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
- FirewallRules: [{3AA6E719-8A74-4F58-B445-5DFB7704CE61}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
- FirewallRules: [{D6796E36-9623-47AD-A26F-0458861E74AC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
- FirewallRules: [{7A2E3A1F-761F-4417-9143-5F6D86DF92BE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
- FirewallRules: [{BD905E00-86E4-4690-8E97-B9528D0D215A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
- FirewallRules: [{6E7613FB-3145-441A-938C-1DA29DA85643}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
- FirewallRules: [{CAC3A6D7-3F7F-434E-AA31-2C2DDD9CE602}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
- FirewallRules: [{0BBD2B6B-E844-467A-AE2C-A893B69A7395}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
- FirewallRules: [{C122EBD1-4051-4097-A908-FAC3C39B6D7A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
- FirewallRules: [{F41EAA47-F8C5-4149-A431-E4B4AA83BB8C}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
- FirewallRules: [{B798DD8D-44CA-438E-8587-529E4F25F56C}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
- FirewallRules: [TCP Query User{B346653A-1535-41DA-86E8-DA7C857C2886}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
- FirewallRules: [UDP Query User{4738EA55-D933-4F1D-B99D-36E3CA1B8DA7}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
- FirewallRules: [{586BFA93-8F87-4EC6-A4CA-55F8C608C60E}] => (Allow) LPort=1689
- FirewallRules: [{4B9D033E-3089-4D1E-8EF9-2B9717E8AAAF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{EBE2ED08-D11D-4B25-AF2F-6C4AAA5287CA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{09CD1A2D-9646-49C3-8DE7-D6A31D2FB061}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
- FirewallRules: [{62D8567F-2BC9-49E7-BCBE-74416EDA59B8}] => (Allow) LPort=2869
- FirewallRules: [{3FBB3A54-68BA-47B1-8C05-699152369D9F}] => (Allow) LPort=1900
- FirewallRules: [TCP Query User{C0FD7995-543C-41DC-880C-D43146BA3A66}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
- FirewallRules: [UDP Query User{66A91B86-8C2B-4DF5-B1C5-846B2195F76A}C:\users\tomasz\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\tomasz\appdata\roaming\spotify\spotify.exe
- FirewallRules: [{07964503-E82A-4A4D-947C-1BE59C2EBAEC}] => (Allow) C:\Users\Tomasz\AppData\Local\Chromium\Application\chrome.exe
- FirewallRules: [TCP Query User{3FF20D39-9072-4FD4-AE5E-F74527EBA0B1}D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe] => (Allow) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
- FirewallRules: [UDP Query User{73D3239B-73B1-46DB-A828-ADE7643DD4FD}D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe] => (Allow) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
- FirewallRules: [{040EE9B8-1269-416F-B821-C779A2027EB1}] => (Block) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
- FirewallRules: [{BDF085AB-FD97-4E1C-9F9C-181E2A226BD2}] => (Block) D:\instalki\p 2 p\utorrentportable\app\utorrent\utorrent.exe
- FirewallRules: [{7CF42105-CA6E-4118-A5B6-CCE3E35A0598}] => (Allow) C:\Program Files\iTunes\iTunes.exe
- FirewallRules: [TCP Query User{F6EDFB10-F299-4EC2-9E4A-F885B8837DAB}E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe] => (Allow) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
- FirewallRules: [UDP Query User{46188EE3-AD51-4B2B-938B-09A65C9468BA}E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe] => (Allow) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
- FirewallRules: [{36230BC9-A7FE-4751-9DEF-8E338991619B}] => (Block) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
- FirewallRules: [{723FEB6D-9D80-4E9C-A1F7-5CC2CFFC94A8}] => (Block) E:\scrap mechanic 0.1.32\scrap.mechanic.v0.1.32\release\scrapmechanic.exe
- FirewallRules: [{FABD9E2B-C996-4DCF-AB02-3BE1D56B4F13}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [{44894732-EF64-4421-A848-49C7467C31A4}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
- FirewallRules: [{6337B930-8476-496B-B38F-223176E934A6}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
- FirewallRules: [{C41FF5E4-5C9A-42B3-865D-3A8A674A1019}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
- FirewallRules: [{7984B87F-9ED6-4151-A499-F2E699247248}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
- FirewallRules: [{C7C4506E-A555-4B34-A82D-AA6F3A6A6772}] => (Allow) LPort=1688
- FirewallRules: [{AC5E7A57-1906-4672-B21D-59E50B169C6D}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
- ==================== Punkty Przywracania systemu =========================
- 20-04-2017 10:11:16 Removed Bonjour
- 20-04-2017 11:26:23 Installed Microsoft Office Professional Plus 2016
- 20-04-2017 11:26:53 PROPLUS
- ==================== Wadliwe urządzenia w Menedżerze urządzeń =============
- Name:
- Description:
- Class Guid:
- Manufacturer:
- Service:
- Problem: : The drivers for this device are not installed. (Code 28)
- Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
- ==================== Błędy w Dzienniku zdarzeń: =========================
- Dziennik Aplikacja:
- ==================
- Error: (04/21/2017 01:28:28 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
- Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
- w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
- w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
- w System.ServiceProcess.ServiceBase.DeferredStop()
- Error: (04/21/2017 12:58:25 AM) (Source: Application Error) (EventID: 1000) (User: )
- Description: Nazwa aplikacji powodującej błąd: MSI_LiveUpdate_Service.exe, wersja: 1.0.0.37, sygnatura czasowa: 0x582449b8
- Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.14393.479, sygnatura czasowa: 0x58256ca0
- Kod wyjątku: 0xc0000374
- Przesunięcie błędu: 0x000d9d11
- Identyfikator procesu powodującego błąd: 0x99c
- Godzina uruchomienia aplikacji powodującej błąd: 0x01d2ba2565503b49
- Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
- Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll
- Identyfikator raportu: 941f5669-ad07-4f44-948a-e28ae01c7375
- Pełna nazwa pakietu powodującego błąd:
- Identyfikator aplikacji względem pakietu powodującego błąd:
- Error: (04/20/2017 12:33:18 PM) (Source: Application Error) (EventID: 1000) (User: )
- Description: Nazwa aplikacji powodującej błąd: MSI_LiveUpdate_Service.exe, wersja: 1.0.0.37, sygnatura czasowa: 0x582449b8
- Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.14393.479, sygnatura czasowa: 0x58256ca0
- Kod wyjątku: 0xc0000374
- Przesunięcie błędu: 0x000d9d11
- Identyfikator procesu powodującego błąd: 0x984
- Godzina uruchomienia aplikacji powodującej błąd: 0x01d2b9ba7500041a
- Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
- Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll
- Identyfikator raportu: 37951522-5fe3-400d-8a26-47ea148ab8f0
- Pełna nazwa pakietu powodującego błąd:
- Identyfikator aplikacji względem pakietu powodującego błąd:
- Error: (04/20/2017 11:43:06 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
- Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
- w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
- w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
- w System.ServiceProcess.ServiceBase.DeferredStop()
- Error: (04/20/2017 11:27:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
- Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
- System Error:
- Odmowa dostępu.
- .
- Error: (04/20/2017 11:26:26 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
- Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
- System Error:
- Odmowa dostępu.
- .
- Error: (04/20/2017 10:22:47 AM) (Source: VSS) (EventID: 8193) (User: )
- Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury QueryFullProcessImageNameW. hr = 0x8007001f, Urządzenie dołączone do komputera nie działa.
- .
- Operacja:
- Wykonywanie operacji asynchronicznej
- Kontekst:
- Stan bieżący: DoSnapshotSet
- Error: (04/20/2017 10:22:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
- Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się.
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft.
- System Error:
- Odmowa dostępu.
- .
- Error: (04/20/2017 10:22:32 AM) (Source: VSS) (EventID: 8194) (User: )
- Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu.
- .
- To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym.
- Operacja:
- Zbieranie danych modułu zapisującego
- Kontekst:
- Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220}
- Nazwa modułu zapisującego: System Writer
- Identyfikator wystąpienia modułu zapisującego: {bc5482d0-06ed-4668-a715-b457f1e98ef6}
- Error: (04/20/2017 10:19:42 AM) (Source: CyberGhost 6 Service) (EventID: 0) (User: )
- Description: Nie można zatrzymać usługi. System.NullReferenceException: Odwołanie do obiektu nie zostało ustawione na wystąpienie obiektu.
- w CyberGhost.VPNServices.OpenVpn.DisconnectFromVpnServer(Boolean sendDisconnectEvent) w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.VPNServices\OpenVPN.cs:wiersz 348
- w Service.ServiceController.OnStop() w C:\TeamCity\buildAgent\work\5e751977071a47b0\Projects\CyberGhost\CyberGhost 6\CyberGhost.Service\ServiceController.cs:wiersz 170
- w System.ServiceProcess.ServiceBase.DeferredStop()
- Dziennik System:
- =============
- Error: (04/21/2017 12:58:25 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
- Description: Usługa MSI Live Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
- Error: (04/21/2017 12:32:23 AM) (Source: DCOM) (EventID: 10010) (User: HOMEPC)
- Description: Serwer {37998346-3765-45B1-8C66-AA88CA6B20B8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
- Error: (04/21/2017 12:30:23 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
- Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
- Nieokreślony błąd.
- Error: (04/21/2017 12:30:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
- Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
- Nieokreślony błąd.
- Error: (04/21/2017 12:22:32 AM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
- Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- i identyfikatorem aplikacji APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
- Error: (04/21/2017 12:19:11 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
- Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x8024200d: Aktualizacja funkcji dla systemu Windows 10, wersja 1703.
- Error: (04/21/2017 12:11:55 AM) (Source: DCOM) (EventID: 10010) (User: HOMEPC)
- Description: Serwer {37998346-3765-45B1-8C66-AA88CA6B20B8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
- Error: (04/21/2017 12:11:00 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
- Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
- Nieokreślony błąd.
- Error: (04/21/2017 12:09:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
- Description: Usługa Usługa platformy podłączonych urządzeń zakończyła działanie; wystąpił następujący błąd:
- Nieokreślony błąd.
- Error: (04/20/2017 07:42:18 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
- Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- i identyfikatorem aplikacji APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
- CodeIntegrity:
- ===================================
- Date: 2017-04-20 09:18:22.901
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2017-04-20 09:06:26.478
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2017-04-20 00:49:46.897
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:49:04.785
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:46:57.039
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:45:54.606
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:43:19.611
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:42:30.593
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- Date: 2017-04-20 00:38:16.323
- Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
- Date: 2017-04-20 00:37:49.816
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
- ==================== Koniec Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement