Otevte poznmkov blok a zkoprujte do nj:

AlternateDataStreams: C:\Windows\system32\Drivers\wacomrouterfilter.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wcifs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wdcsam64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wdfcoinstaller01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WdiWiFi.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\winhvr.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\wof.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\xboxgip.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\xinputhid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\AiChargerPlus.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\AndroidAFDx64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\AsIO.sys:$CmdZnID [26]
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\DDCDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Desktop\adwcleaner_6.043.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Desktop\adwcleaner_6.043.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Desktop\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Desktop\FRST64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Desktop\FRSTLauncher.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Desktop\FRSTLauncher.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\007-faktura-fototori-2017.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\15683326_10211164149929834_588154813_n.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\15713282_10211172186690748_1265641643_n.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\AISuiteIII_V10159_DIP5_10390.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\BitlordSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\BitlordSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\BlueStacks2_native_d75a38db7b8c9ec89c6d13816f7f3f0e.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\BlueStacks2_native_d75a38db7b8c9ec89c6d13816f7f3f0e.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E01(0000238257).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E02(0000238258).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E03(0000238259).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E04(0000238260).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E05(0000238261).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E06(0000238262).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E07(0000238263).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Boardwalk-Empire-S03E08(0000238264).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\ccsetup525.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\ccsetup525.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\christmas-atn.atn:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\ColorMunkiPhotoSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\ColorMunkiPhoto_1-1-1_Win.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\CrystalDiskMark5_2_0-en.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\CrystalDiskMark5_2_0-en.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\DeepSkyStacker_exe.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\DE_Eskadron_BasicsXVI_Preisliste_2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\FileZilla_3.22.1_win64-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\FileZilla_3.22.1_win64-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\FileZilla_3.22.2.2_win64-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\FileZilla_3.24.0_win64-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\hdtunepro_560_trial.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\hdtunepro_560_trial.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\honza_vejvoda (1).zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\honza_vejvoda.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\HotPixelRemover.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\HPU_v2.2.3.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\HPU_v2.2.3.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Hugin-2016.2.0-win64.msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\i1Diagnostics-4.1.2-Installer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\i1Diagnostics-4.1.2-Installer.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\i1ProfilerSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\i1ProfilerSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\InstallScreencastOMatic-2.0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\InstallScreencastOMatic-2.0.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\kalibrace.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\logo.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\logo_kone&lide_bilomodra.ai:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\logo_kone&lide_bilomodra.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\logo_kone&lide_bilomodra.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\mkvtoolnix-32bit-9.5.0-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\mkvtoolnix-32bit-9.5.0-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\MrawGui_1.5.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\MrawGui_1.6.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\PixelFixer-1.17_64bit.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\pm5_calibration_tester.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\profact30inst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\profact30inst.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\pspad461inst_cz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\pspad461inst_cz.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\ptgui-pro-10-full-registration-key_3537917.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\RawTherapee_WinVista_64_5.0-gtk3_3.18_release.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\RSITx64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\RSITx64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\setup-lightshot.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\setup-lightshot.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\SpotifySetup.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Max_cz\Downloads\SpotifySetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\SpywareTerminatorSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\SpywareTerminatorSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\StarStaX-0.71_win64.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\stellarium-0.15.0-win64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\stellarium-0.15.0-win64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\tcmd900x64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\tcmd900x64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\TeamViewer_Setup_cs-ajem.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\TeamViewer_Setup_cs-ajem.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Uloz.to_Uploader-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\Uloz.to_Uploader-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\UserBenchMark.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\UserBenchMark.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\uTorrent221.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\uTorrent221.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\vlc-2.2.4-win32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\vlc-2.2.4-win32.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\WebcamScreenVideoCaptureFree.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\WebcamScreenVideoCaptureFree.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\WebLaunchRecorder.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\WebLaunchRecorder.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\winrar-x64-540cz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Max_cz\Downloads\winrar-x64-540cz.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\[CzT]Assassin_s_Creed_2008_CZ_.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\[CzT]Blazniva_zatracena_laska_Crazy_Stupid_Love_2011_.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Max_cz\Downloads\[CzT]Dite_Bridget_Jonesove_Bridget_Jones_s_Baby_2016_CZ_.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Windows\system32\IdCtrls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imapi2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ImplatSetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InputLocaleManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InputService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\iphlpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ipnathlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsiwmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\JpMapControl.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kdhvcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KnobsCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KnobsCsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LaunchWinApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LicenseManagerSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ListSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LocationFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LockAppBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LockAppHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LogonController.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\lpremove.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LsaIso.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\manage-bde.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapConfiguration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapControlCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapControlStringsRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapGeocoder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapRouter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapsBtSvc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MapsBtSvcProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapsCSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MapsStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapstoasttask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapsupdatetask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MbaeApiPublic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mbsmsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MDEServer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MDMAppInstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mdmregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfasfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfaudiocnv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFCaptureEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFMediaEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfmkvsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfmp4srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfmpeg2srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFPlay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfreadwrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Microsoft-Windows-MapControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Microsoft-Windows-MosHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Microsoft-Windows-MosTrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\microsoft-windows-system-events.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\migisol.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MiracastReceiver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\modernexecserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\moshost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MosHostClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\moshostcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MosResource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MosStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprddm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MpSigStub.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MrmCoreR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MSAC3ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSAJApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSAudDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtcprx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtctm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtcuiu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msftedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msinfo32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mspaint.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mssprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssrch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSVidCtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSVideoDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSVP9DEC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSVPXENC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MusNotification.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MusUpdateHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nativemap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NaturalLanguage6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetCfgNotifyObjectHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netiougc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netplwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetSetupApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetSetupEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetSetupShim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetSetupSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nettrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetworkBindingEngineMigPlugin.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NetworkCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetworkDesktopSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetworkMobileSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetworkUXBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NFCProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NfcRadioMedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ngccredprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NgcCtnr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NgcCtnrGidsHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ngcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsLexicons0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nltest.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NMAA.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NmaDirect.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NotificationController.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NPSM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nshwfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntshrui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvapi64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvcompiler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvcuda.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvcuvid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvDecMFTMjpeg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvdispco6437290.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvdispgenco6437290.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvEncMFTH264.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvEncMFThevc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvEncodeAPI64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvfatbinaryLoader.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NvFBC64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NvIFR64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NvIFROpenGL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvmcumd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvoglv64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvopencl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvptxJitCompiler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvvsvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbcconf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\offlinelsa.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\offlinesam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\offreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ole32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OnDemandConnRouteHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OneBackupHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OneDriveSettingSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhoneProviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhoneService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhoneServiceRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Phoneutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhoneutilRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pidgenx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PimIndexMaintenance.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PlayToDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PlayToManager.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PlayToReceiver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnidui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\policymanager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\POSyncServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\powercfg.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PresentationNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PrintWSDAHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prm0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provhandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provisioningcsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provops.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProvPluginEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProvSysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provtool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PsmServiceExtHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pwcreator.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\pwrshplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rascustom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasmans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpencom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpshell.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RDXService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RDXTaskFactory.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReAgentc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RelPost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\remoteaudioendpoint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RemoteNaturalLanguage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RemovableMediaProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReportingCSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\reseteng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ResetEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ResetEngine.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\resutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RjvMDMConfig.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rshx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RTMediaFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RTWorkQ.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\samlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\samsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sbe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ScDeviceEnum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchFilterHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchIndexer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchProtocolHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SecConfig.efi:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\securekernel.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sendmail.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Sens.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorDataService.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorsApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\services.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SessEnv.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers_Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers_Flights.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers_nt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers_StorageSense.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers_WorkAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setupugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SharedStartModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ShareHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shdocvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shutdownux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\skci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\slc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\slcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smartscreen.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SndVolSSO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SpaceAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SpaceControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spaceman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SpeechPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spoolsv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppobjs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppsvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppwinob.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SRH.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SRHInproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\stobject.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorageUsage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StructuredQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sud.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SyncCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysResetErr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\systemreset.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsAdminFlows.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskbarcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcpipcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TextInputFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\themecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\timedate.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TokenBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpmCoreProvisioning.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpmTasks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TransportDSA.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tsmf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tspubwmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSWorkspace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinapi.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinui.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinui.pcshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzautoupdate.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAutomationCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIRibbonRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umpoext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unimdm.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\updatehandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uReFS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDataAccessRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDataLanguageUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDataPlatformHelperUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDataTimeUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDataTypeHelperUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDeviceRegistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserDeviceRegistration.Ngc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usermgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserMgrProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usocore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VCardParser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VEStoreEventHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vmrdvcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vpnike.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VPNv2CSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vulkaninfo-1-1-0-26-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\w32time.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WacDriverDLCoinst.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wbiosrvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wc_storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdfcoinstaller01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebcamUi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\weretw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wevtapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wevtsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wfdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WiFiConfigSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wificonnapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wifinetworkmanager.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wifiprofilessettinghandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wifitask.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32kbase.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32kfull.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinBioDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinBioDataModelOOBE.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.AccountsControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Wallet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Cortana.Desktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Data.Pdf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.AllJoyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.LowLevel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Midi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Perception.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Picker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.PointOfService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Printers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Radios.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Scanners.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Sensors.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.SerialCommunication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.SmartCards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Usb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.WiFi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.WiFiDirect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Energy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Gaming.Input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Globalization.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Graphics.Printing.3D.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Graphics.Printing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Internal.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Internal.Management.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Devices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Editing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.FaceAnalysis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Import.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.Media.MediaControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Ocr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Protection.PlayReady.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Speech.UXRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Streaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Connectivity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.HostName.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Vpn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Perception.Stub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.StateRepository.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.StateRepositoryBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.StateRepositoryClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Storage.ApplicationData.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.System.UserDeviceAssociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.BioFeedback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.BlockedShutdown.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Core.TextInput.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Cred.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.CredDialogController.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Input.Inking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Search.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Shell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.Maps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.Phone.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.Resources.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.Web.Diagnostics.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Web.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Web.Http.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininetlui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winlogon.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\winmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSCard.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinTypes.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wkssvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WlanMediaManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanmsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansvcpal.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wlidsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMPDMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpeffects.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WordBreakers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpAXHolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpcRefreshTask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpcTok.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpcWebFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpncore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpninprc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ws2_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscui.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsecedit.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsp_sr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuuhext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwanconn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwanmm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwanprotdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XamlTileRender.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XblAuthManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aadtb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AboveLockAppHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ActionCenterCPL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ActivationManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AddressParser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppCapture.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppContracts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppointmentActivation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppointmentApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apprepapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apprepsync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppVEntSubsystems32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\appwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppXDeploymentClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppxPackaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ASGT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AsIO.dll:$CmdZnID [26]
AlternateDataStreams: C:\Windows\SysWOW64\asycfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [32]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\autoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AzureSettingSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BackgroundMediaPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BcastDVRHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BingMaps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BingOnlineServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\biwinrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BluetoothApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CertEnroll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Chakra.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Chakradiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chartv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ChatApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CloudBackupSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CloudExperienceHostCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CloudExperienceHostUser.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\CloudStorageWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmifw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comdlg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ContactActivation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ContactApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\container.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CoreMessaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CoreUIComponents.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credprovhost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credprovs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credprovslegacy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptngc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CryptoWinRT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10warp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d11.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_47.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DataExchange.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\daxexec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DbgModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DDCHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DDCHelperX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ddraw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\deviceassociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceFlows.DataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DevicePairing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dialclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DisplayManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dlnashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmenrollengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dnsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DolbyDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drvstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dtdump.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxgi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EditBufferTestHook.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efswrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EmailApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ErrorDetails.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ErrorDetailsUpdate.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\esent.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\esentutl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExSMime.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExtrasXmlParser.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\findnetprinters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fontdrvhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fontext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gameux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32full.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GdiPlus.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Geolocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GlobCollationHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hevcdecoder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hgcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imapi2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InputLocaleManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InputService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsiwmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\java.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\javaw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\javaws.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\JpMapControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LaunchWinApp.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LicenseManagerApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LockAppBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LockAppHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LogonController.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapConfiguration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapControlCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapControlStringsRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapGeocoder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapRouter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MapsBtSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MbaeApiPublic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mbsmsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mdmregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfasfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfaudiocnv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFMediaEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfmkvsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfmp4srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfmpeg2srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFPlay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfreadwrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Microsoft-Windows-MapControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Microsoft-Windows-MosHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Microsoft-Windows-MosTrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\migisol.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MiracastReceiver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MosHostClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MosResource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MosStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprddm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MrmCoreR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSAC3ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSAJApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdtcprx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdtcuiu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msftedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msinfo32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mspaint.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssrch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSVidCtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSVP9DEC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSVPXENC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxclu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NaturalLanguage6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netiougc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NetSetupApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NetSetupEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NetSetupShim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NetworkCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ngccredprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsLexicons0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NMAA.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NmaDirect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NPSM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nshwfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [32]
AlternateDataStreams: C:\Windows\SysWOW64\ntshrui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvcompiler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvcuda.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvcuvid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvDecMFTMjpeg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvEncMFTH264.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvEncMFThevc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvEncodeAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvfatbinaryLoader.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NvFBC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NvIFR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NvIFROpenGL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvoglv32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvopencl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvptxJitCompiler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvStreaming.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcconf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\offlinelsa.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\offlinesam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\offreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ole32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oleacc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\olepro32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\pdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Phoneutil.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\PhoneutilRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pidgenx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PlayToDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PlayToManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PlayToReceiver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\policymanager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\POSyncServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\powercfg.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PrintDialogs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pwrshplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdpencom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ReAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ReAgentc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\remoteaudioendpoint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RemoteNaturalLanguage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\resutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RTMediaFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RTWorkQ.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\samlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchIndexer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchProtocolHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sendmail.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SessEnv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setupugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ShareHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\slc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\slcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\smphost.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SndVolSSO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sppc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sppcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\stobject.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sud.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SyncSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\systemcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tcpipcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TempSignedLicenseExchangeTask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TextInputFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\themecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TokenBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TpmCoreProvisioning.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tsmf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinapi.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinui.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAutomationCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIRibbonRes.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\unimdm.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uReFS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataAccessRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataAccountApis.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataLanguageUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataTimeUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDeviceRegistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserMgrProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VCardParser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vulkaninfo-1-1-0-26-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebcamUi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\weretw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wevtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wfdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\win32k.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\win32kfull.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\win32u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.AccountsControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Data.Pdf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Midi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Perception.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Picker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Radios.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Scanners.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Sensors.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Usb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.WiFi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Energy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Gaming.Input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Globalization.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Graphics.Printing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Internal.Management.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Editing.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Import.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Ocr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Streaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.HostName.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Perception.Stub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.StateRepository.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Cred.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Search.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Web.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Web.Http.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininetlui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinRtTracing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinSCard.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinTypes.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wlanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMPDMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpeffects.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WordBreakers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WpcWebFilter.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ws2_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscui.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsecedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsp_sr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WwaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xolehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ahcache.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\AppVStrm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\asmthub3.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\asmtxhci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\capimg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Classpnp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\clfs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ClipSp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cmimcext.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\colormunki_x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\crashdmp.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\dam.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ddcdrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dfsc.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dumpsd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dxgkrnl.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dxgmms1.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dxgmms2.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\EhStorTcgDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\fastfat.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\fvevol.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\FWPKCLNT.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidclass.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidkmdf.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\hidparse.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidusb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hvservice.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\i1display_x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\i1io2_x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\i1iSis_x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\i1_x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\iorate.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\kbdhid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\MegaSas2i.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\modem.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ntfs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\partmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pdc.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pdiports.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rdbss.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rsdrvx64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\sdbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\spaceport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\srv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\srv2.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\srvnet.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\storahci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\stornvme.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\storport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tcpip.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tpm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\vhdmp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\vpci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wachidrouter.sys:$CmdTcID [64]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [149280 2017-02-03] (Sun Microsystems, Inc.)
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Users\Max_cz\AppData\Local\Temp
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\splwow64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aadcloudap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aadtb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AboveLockAppHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AccountsRt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ACPBackgroundManagerPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ActionCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ActionCenterCPL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ActivationManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AddressParser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aksllmtp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppCapture.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppContracts.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppointmentActivation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppointmentApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppReadiness.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apprepapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apprepsync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVCatalog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVClient.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVDllSurrogate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVEntStreamingManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVEntSubsystemController.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVEntSubsystems64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVEntVirtualization.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVIntegration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVManifest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVOrchestration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVPublishing.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\AppVReporting.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVScripting.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppVShNotify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXApplicabilityBlob.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentExtensions.desktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentExtensions.onecore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxPackaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\asycfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEndpointBuilder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSrvPolicyManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\autoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AzureSettingSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\baaupdate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BackgroundMediaPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BarcodeProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BcastDVRHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcrypt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bdechangepin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdesvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdeunlock.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BingMaps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BingOnlineServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BitLockerDeviceEncryption.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\biwinrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BluetoothApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BootMenuUX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bootux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\browserbroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthRadioMedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CastLaunch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CbtBackgroundManagerPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdpusersvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CertEnroll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Chakra.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Chakradiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chartv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ChatApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ClipUp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cloudAP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudBackupSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudExperienceHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudExperienceHostBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudExperienceHostCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudExperienceHostUser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudStorageWizard.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmifw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmintegrator.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comdlg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ConsoleLogon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ContactActivation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ContactApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\container.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ContentDeliveryManager.Utilities.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CoreMessaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CoreUIComponents.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credprovhost.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\credprovs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credprovslegacy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptngc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CryptoWinRT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cscui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d2d1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d11.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_47.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dab.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafBth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafpos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\das.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dasHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DataExchange.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DataSenseHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\daxexec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbgeng.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\DbgModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDCHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDCHelperX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ddraw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceaccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceassociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceCensus.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceEnroller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceFlows.DataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevicePairing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevicePairingFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceReactivation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcore6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dialclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dialserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\discan.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DisplayManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dlnashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmcertinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmenrollengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DMRServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dnsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DolbyDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\domgmt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dosvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drvstore.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\DscCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsregcmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxgi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EAMProgressHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\easwrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EditBufferTestHook.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EditionUpgradeHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EditionUpgradeManagerObj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EDPCleanup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efswrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EmailApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\energy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EnterpriseAppMgmtSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\enterprisecsps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ErrorDetails.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ErrorDetailsUpdate.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\esent.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\esentutl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExSMime.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExtrasXmlParser.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\facecredentialprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Family.Authentication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Family.Client.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Family.SyncEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ffbroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhsettingsprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FlightSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fontdrvhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fontext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FontProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FrameServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapibase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvenotify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveprompt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvewiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gameux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gdi32full.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GdiPlus.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GenValObj.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Geolocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GlobCollationHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hal.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\hasplms.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hevcdecoder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hgcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HttpsDataSource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hvax64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hvix64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hvloader.efi:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hvloader.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icsvc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\icsvcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IdCtrls.dll:$CmdTcID [64]

EmptyTemp:
End.

Ulote na plochu jako fixlist.txt. Spuste znovu FRST a kliknte na >Fix<. Po skonen akce se objev log, kter sem zkoprujte.

Z logu:

[quote]Velikost slozky "C:\Users\Max_cz\Desktop" je 7874 MB.[/quote]

To je pli mnoho a me to zpomalovat start systmu. Vytvote v C:\Users\Max_cz novou sloku, do n pesute vechna data z plochy (krom zstupcc) Na plochu si pak dejte zstupce t sloky pro snaz pstup.