Re: pro motji
Napsal: 16 črc 2016 09:58
Fix result of Farbar Recovery Scan Tool (x64) Version: 09-07-2016
Ran by Tomas (2016-07-16 10:38:57) Run:1
Running from C:\Users\Tomas\Desktop
Loaded Profiles: Tomas (Available Profiles: Tomas)
Boot Mode: Normal
==============================================
fixlist content:
*****************
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3061203490-3799476124-1463932836-1000\...\Run: [windirs] => C:\Users\Tomas\AppData\Roaming\dirs\trwe.exe
U5 BFE; <===== ATTENTION: Locked Service
AlternateDataStreams: C:\Windows\difxapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\CmiFltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsMgr64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsSrv64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsSrv642.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmasiopx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Cmeauoxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CmiCnfgP.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CmiInstallResAll64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmudaxp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Cm_Oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvaudcap64v.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenAL32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wrap_oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmasiop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CmiCnfgp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CmiFltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Cmpaoxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Cm_Oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HsMgr.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\HsSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HsSrv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvaudcap32v.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenAL32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VmixP8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wrap_oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cmudaxp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\nvvad64v.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID [64]
AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [0]
AlternateDataStreams: C:\Users\Tomas\Desktop\$_35.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\10296375_777680752251433_7520339795265519082_o.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\10440821_10203854994162871_1373651193093004697_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\11738055_1009909505708560_2655345021947015536_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\13516334_10201750055831248_3829009012877130994_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\16-i28230.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\20160416_180520.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Desktop\20160416_180520.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\22702-univerzum-vseobecna-encyklopedia-pre-21-storocie-nestandard1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\276284.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\276720_570f68c5d73a480cbdbcf3d2cf41c454.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\2_thumb_1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\486479.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\4c7f73b0b855a.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4276900_142908_20140727_14439.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4813564_60882_20141203_35212.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4830080_50689_20141206_29945.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N6273986_43463_20160116_12702.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N6726077_61082_20160504_35509.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Desktop\FRST64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\Giraffe.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l.php.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l20511.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l37526.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-americky_pitbulterier.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-ludske_telo_unikatny_obrazovy_sprievodca.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-predhistoria.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\ml4587.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\papoucsimadagaskar.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\The-Elephant-portrait.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\01 - Cancion Del Mariachi (Desperado).flac:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\01 - Cancion Del Mariachi (Desperado).flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\032 - Snoop Dogg & Wiz Khalifa ft. Bruno Mars - Young Wild And Free.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\032 - Snoop Dogg & Wiz Khalifa ft. Bruno Mars - Young Wild And Free.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\11_-_Adele_-_Someone_Like_You.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\11_-_Adele_-_Someone_Like_You.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\12247046_997043553690002_6538794650488572407_n.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\13563400_1050942081626131_1626193806_n.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\13563400_1050942081626131_1626193806_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\16---The-Hanging-Tree---James-Newton-Howard.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\16---The-Hanging-Tree---James-Newton-Howard.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\1_jpeg644da3ea2039ec50616a9fd0f1a43580.jpeg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\1_jpeg644da3ea2039ec50616a9fd0f1a43580.jpeg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\20151105_181534.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\20151105_181534.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\20160416_191101.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\20160416_191101.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\2afb89a5e696a5388e3667776c534c3c.gif:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\3DMark11-v1-0-132.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\3DMark11-v1-0-132.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\55843193.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\946777_1742916139262940_5888588043330652952_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\adwcleaner_5.201.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\adwcleaner_5.201.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\aida64extreme570.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E01(0000268085).srt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E01(0000268085).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E02(0000268819).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals.S01E01.HDTV.x264-KILLERS[ettv].mp4:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals.S01E01.HDTV.x264-KILLERS[ettv].mp4:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\arrow.s04e22.hdtv.x264-lol.srt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\arrow.s04e22.hdtv.x264-lol.srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\arulersetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\arulersetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Baumit_Jpeg.zip:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\Baumit_Jpeg.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\blockposter-132043.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\blockposter-132043.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\camstudio_2.6beta.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\camstudio_2.6beta.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ddmsetup1800.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ddmsetup1800.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\faststone-capture_7.3Shareware.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\faststone-capture_7.3Shareware.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup 45.0.1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup 45.0.1.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\fotky.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\fotky.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\FT5S+Abosch+faces+of+ireland+dublin+airport.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\FurMark_1.10.2_Setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Futuremark_SystemInfo_v446_installer.msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Futuremark_SystemInfo_v446_installer.msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\GeForce_Experience_Beta_v3.0.2.190.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\GeForce_Experience_Beta_v3.0.2.190.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\gimp-2.8.16-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\gimp-2.8.16-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\GoogleEarthProSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\GoogleEarthProSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Guns N' Roses - Sweet Child O'Mine.flac:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\Guns N' Roses - Sweet Child O'Mine.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1578.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1578.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1579.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1579.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1580.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1580.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1581.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1581.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\instant-eyedropper-1.8.5.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\instant-eyedropper-1.8.5.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\iview442_x64_setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\iview442_x64_setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\konečna verzia.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\konečna verzia.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\MEGAsyncSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\MEGAsyncSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Metallica_-_Nothing_Else_Matters.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Metallica_-_Nothing_Else_Matters.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Michonnin príbeh SK.rar:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Michonnin príbeh SK.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ml15338.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\moj-komp.docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\MUM52131.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\netscan_portable.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\netscan_portable.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Oznamenie pre rodicov A (1).doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Oznamenie pre rodicov A.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PONUKA PRE MS.eml:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTray320.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTray320.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTrayPlugins_beta6.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTrayPlugins_beta6.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Punisher Akční 2004 cz.avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Punisher Akční 2004 cz.avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\R.E.M.---Out-Of-Time---02.-Losing-My-Religion.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\R.E.M.---Out-Of-Time---02.-Losing-My-Religion.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\screenrecorderfree.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\screenrecorderfree.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup help read.txt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup help read.txt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup registry file edit this.reg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup registry file edit this.reg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\siw_tech.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\siw_tech.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Star-Wars-Volume-1.cz.fenixprodabing.avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Star-Wars-Volume-1.cz.fenixprodabing.avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\SteamSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\SteamSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Survivor---Eye-of-the-Tiger.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Survivor---Eye-of-the-Tiger.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-(2016)-(Digital)-(Minutemen-Acan).cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-(2016)-(Digital)-(Minutemen-Acan).cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-sk.cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-sk.cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-155-sk.cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-155-sk.cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Blood.and.Wine-CODEX.torrent:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Blood.and.Wine-CODEX.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Patch.v1.22-GOG.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.v1.02-v1.22.Plus.22.Trainer-FLiNG.rar:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.v1.02-v1.22.Plus.22.Trainer-FLiNG.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Unigine_Heaven-4.0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Unigine_Heaven-4.0.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller(1).msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller(1).msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller.msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller.msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\WinSnap_4.5.3-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\WinSnap_4.5.3-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\zivotopis(1).docx:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\zivotopis(1).docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\zoznam_dlznikov_20_05_2016_csv.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\zoznam_dlznikov_20_05_2016_csv.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ZS - rocenka grafity.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ZS - rocenka grafity.jpg:$CmdZnID [26]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3061203490-3799476124-1463932836-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
*****************
Ran by Tomas (2016-07-16 10:38:57) Run:1
Running from C:\Users\Tomas\Desktop
Loaded Profiles: Tomas (Available Profiles: Tomas)
Boot Mode: Normal
==============================================
fixlist content:
*****************
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3061203490-3799476124-1463932836-1000\...\Run: [windirs] => C:\Users\Tomas\AppData\Roaming\dirs\trwe.exe
U5 BFE; <===== ATTENTION: Locked Service
AlternateDataStreams: C:\Windows\difxapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\CmiFltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsMgr64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsSrv64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system\HsSrv642.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmasiopx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Cmeauoxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CmiCnfgP.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CmiInstallResAll64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmudaxp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Cm_Oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nvaudcap64v.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenAL32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wrap_oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmasiop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CmiCnfgp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CmiFltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Cmpaoxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Cm_Oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HsMgr.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\HsSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HsSrv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nvaudcap32v.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenAL32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VmixP8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wrap_oal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cmudaxp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\nvvad64v.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID [64]
AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [0]
AlternateDataStreams: C:\Users\Tomas\Desktop\$_35.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\10296375_777680752251433_7520339795265519082_o.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\10440821_10203854994162871_1373651193093004697_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\11738055_1009909505708560_2655345021947015536_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\13516334_10201750055831248_3829009012877130994_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\16-i28230.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\20160416_180520.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Desktop\20160416_180520.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\22702-univerzum-vseobecna-encyklopedia-pre-21-storocie-nestandard1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\276284.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\276720_570f68c5d73a480cbdbcf3d2cf41c454.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\2_thumb_1.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\486479.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\4c7f73b0b855a.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4276900_142908_20140727_14439.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4813564_60882_20141203_35212.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N4830080_50689_20141206_29945.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N6273986_43463_20160116_12702.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\b-N6726077_61082_20160504_35509.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Desktop\FRST64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\Giraffe.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l.php.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l20511.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\l37526.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-americky_pitbulterier.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-ludske_telo_unikatny_obrazovy_sprievodca.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\large-predhistoria.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\ml4587.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\papoucsimadagaskar.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Desktop\The-Elephant-portrait.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\01 - Cancion Del Mariachi (Desperado).flac:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\01 - Cancion Del Mariachi (Desperado).flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\032 - Snoop Dogg & Wiz Khalifa ft. Bruno Mars - Young Wild And Free.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\032 - Snoop Dogg & Wiz Khalifa ft. Bruno Mars - Young Wild And Free.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\11_-_Adele_-_Someone_Like_You.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\11_-_Adele_-_Someone_Like_You.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\12247046_997043553690002_6538794650488572407_n.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\13563400_1050942081626131_1626193806_n.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\13563400_1050942081626131_1626193806_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\16---The-Hanging-Tree---James-Newton-Howard.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\16---The-Hanging-Tree---James-Newton-Howard.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\1_jpeg644da3ea2039ec50616a9fd0f1a43580.jpeg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\1_jpeg644da3ea2039ec50616a9fd0f1a43580.jpeg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\20151105_181534.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\20151105_181534.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\20160416_191101.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\20160416_191101.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\2afb89a5e696a5388e3667776c534c3c.gif:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\3DMark11-v1-0-132.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\3DMark11-v1-0-132.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\55843193.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\946777_1742916139262940_5888588043330652952_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\adwcleaner_5.201.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\adwcleaner_5.201.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\aida64extreme570.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E01(0000268085).srt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E01(0000268085).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals-S01E02(0000268819).srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals.S01E01.HDTV.x264-KILLERS[ettv].mp4:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Animals.S01E01.HDTV.x264-KILLERS[ettv].mp4:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\arrow.s04e22.hdtv.x264-lol.srt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\arrow.s04e22.hdtv.x264-lol.srt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\arulersetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\arulersetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Baumit_Jpeg.zip:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\Baumit_Jpeg.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\blockposter-132043.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\blockposter-132043.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\camstudio_2.6beta.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\camstudio_2.6beta.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ddmsetup1800.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ddmsetup1800.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\faststone-capture_7.3Shareware.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\faststone-capture_7.3Shareware.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup 45.0.1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup 45.0.1.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\fotky.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\fotky.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\FT5S+Abosch+faces+of+ireland+dublin+airport.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\FurMark_1.10.2_Setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Futuremark_SystemInfo_v446_installer.msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Futuremark_SystemInfo_v446_installer.msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\GeForce_Experience_Beta_v3.0.2.190.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\GeForce_Experience_Beta_v3.0.2.190.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\gimp-2.8.16-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\gimp-2.8.16-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\GoogleEarthProSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\GoogleEarthProSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Guns N' Roses - Sweet Child O'Mine.flac:$CmdTcID [130]
AlternateDataStreams: C:\Users\Tomas\Downloads\Guns N' Roses - Sweet Child O'Mine.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1578.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1578.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1579.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1579.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1580.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1580.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1581.JPG:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\IMG_1581.JPG:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\instant-eyedropper-1.8.5.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\instant-eyedropper-1.8.5.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\iview442_x64_setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\iview442_x64_setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\konečna verzia.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\konečna verzia.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\MEGAsyncSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\MEGAsyncSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Metallica_-_Nothing_Else_Matters.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Metallica_-_Nothing_Else_Matters.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Michonnin príbeh SK.rar:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Michonnin príbeh SK.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ml15338.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\moj-komp.docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\MUM52131.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\netscan_portable.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\netscan_portable.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Oznamenie pre rodicov A (1).doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Oznamenie pre rodicov A.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PONUKA PRE MS.eml:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTray320.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTray320.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTrayPlugins_beta6.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\PopTrayPlugins_beta6.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Punisher Akční 2004 cz.avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Punisher Akční 2004 cz.avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\R.E.M.---Out-Of-Time---02.-Losing-My-Religion.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\R.E.M.---Out-Of-Time---02.-Losing-My-Religion.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\screenrecorderfree.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\screenrecorderfree.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup help read.txt:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup help read.txt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup registry file edit this.reg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\setup registry file edit this.reg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\siw_tech.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\siw_tech.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Star-Wars-Volume-1.cz.fenixprodabing.avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Star-Wars-Volume-1.cz.fenixprodabing.avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\SteamSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\SteamSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Survivor---Eye-of-the-Tiger.flac:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Survivor---Eye-of-the-Tiger.flac:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-(2016)-(Digital)-(Minutemen-Acan).cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-(2016)-(Digital)-(Minutemen-Acan).cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-sk.cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-154-sk.cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-155-sk.cbr:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The-Walking-Dead-155-sk.cbr:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Blood.and.Wine-CODEX.torrent:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Blood.and.Wine-CODEX.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.Patch.v1.22-GOG.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.v1.02-v1.22.Plus.22.Trainer-FLiNG.rar:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\The.Witcher.3.Wild.Hunt.v1.02-v1.22.Plus.22.Trainer-FLiNG.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ukoncenie spoluprace Zajaros.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\Unigine_Heaven-4.0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\Unigine_Heaven-4.0.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller(1).msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller(1).msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller.msi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ViewRightWebInstaller.msi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\WinSnap_4.5.3-setup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\WinSnap_4.5.3-setup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\zivotopis(1).docx:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\zivotopis(1).docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\zoznam_dlznikov_20_05_2016_csv.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\zoznam_dlznikov_20_05_2016_csv.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Tomas\Downloads\ZS - rocenka grafity.jpg:$CmdTcID [64]
AlternateDataStreams: C:\Users\Tomas\Downloads\ZS - rocenka grafity.jpg:$CmdZnID [26]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3061203490-3799476124-1463932836-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
*****************