CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [30080 2015-02-18] ()
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.1\bin\EpmNews.exe [2086568 2014-03-06] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUS EPM Tray Agent] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.1\bin\TrayPopupE\TrayTipAgentE.exe [254024 2014-02-13] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2015-02-08] (Wondershare)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-08-20] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2949447929-3806749029-1979589009-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-2949447929-3806749029-1979589009-1000\...\Run: [DriverMax] => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [8982544 2015-08-21] (Innovative Solutions)
HKU\S-1-5-21-2949447929-3806749029-1979589009-1000\...\Run: [DriverMax_RESTART] => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe [8982544 2015-08-21] (Innovative Solutions)
BootExecute: 0Õ
HKLM-x32\...\Run: [] => [X]
AlternateDataStreams: C:\Windows\Acer Crystal Eye webcam.EXE:$CmdTcID
AlternateDataStreams: C:\Windows\Image.dll:$CmdTcID
AlternateDataStreams: C:\Windows\notepad.exe:$CmdTcID
AlternateDataStreams: C:\Windows\PLFSetL.exe:$CmdTcID
AlternateDataStreams: C:\Windows\RtlExUpd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\snuvcdsm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\USB_VIDEO_REG.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\certcli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\difx64.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dwmcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gfxSrvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\GfxUI.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\hccutils.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\HdmiCoin.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\hkcmd.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\hpinkcoi8911.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\hpinkins8911.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\hpinksts8911LM.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\HPScanTRDrv_DJ1050_J410.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\HPWia2_DJ1050_J410.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\IccLibDll_x64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ig4icd64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igd10umd64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igdumd64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxcmjit64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxcmrt64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxCoIn_v2858.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxcpl.cpl:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxdev.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\IGFXDEVLib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxdo.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxexps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxext.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxpers.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxpph.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrara.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrchs.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrcht.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrcsy.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrdan.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrdeu.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrell.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrenu.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxresn.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxress.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrfin.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrfra.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrheb.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrhrv.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrhun.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrita.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrjpn.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrkor.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrnld.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrnor.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrplk.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrptb.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrptg.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrrom.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrrus.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrsky.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrslv.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrsve.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrtha.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxrtrk.lrc:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxsrvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxsrvc.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxTMM.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\igfxtray.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iglhcp64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iglhsip64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jnwmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecfg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecfg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecoin.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecomc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecoms.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecuir.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeecur.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeegcfg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeegrd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeehbn3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeehcp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeiesc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeih.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeinpa.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeins.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeinsb.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeinsr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeejswr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeelmpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeepmui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeserv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeesm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeesmr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeeusb1.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxeevs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\LXEEwupd.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxk_g.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lxk_gf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MpSigStub.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NETwNc64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NETwNr64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ole32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\RdpGroupPolicyExtension.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\services.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\v3DDKAdapterUmode.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01005.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01009.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01011.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wiafbdrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinUSBCoInstaller2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wpdshext.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\certcli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\d3d10warp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ig4icd32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igd10umd32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igdumd32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igdumdx32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igfxcmjit32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igfxcmrt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igfxdv32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\igfxexps32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iglhcp32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iglhsip32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lxeecfg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lxeecoms.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lxeeih.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lxeesm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lxeesmr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msimsg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\notepad.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ole32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\v3DDKAdapterUmodeWow64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\amdkmafd.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\igdkmd64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\IntcHdmi.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\L1C62x64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mf.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\MpFilter.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\MxEFUF64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\NETwNs64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\NisDrvWFP.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PSKMAD.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\rndismpx.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\Smb_driver_Intel.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\sncduvc.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\snp2uvc.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssadcm.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssadwh.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssudbus.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssudmdm.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\stream.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\tmcomm.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\usb8023x.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\v3DDKAdapterKmode.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\WdfCoInstaller01005.dll:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\20150612_pc_auto_id_card.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\20150612_pc_auto_id_card.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\57bb0165-0e97-4ba1-8d18-8cf63d8d50d8_1420219525720.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\57bb0165-0e97-4ba1-8d18-8cf63d8d50d8_1420219525720.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\BankingAndCurrencyAndTheMoneyTrust-ByCharlesA.Lindbergh.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\BankingAndCurrencyAndTheMoneyTrust-ByCharlesA.Lindbergh.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\compplanbooklet2014 ENGLISH.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\compplanbooklet2014 ENGLISH.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\divemaster_brochure.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\divemaster_brochure.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\FSS.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Desktop\FSS.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\tacos de chimpa.jpg:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Desktop\TMO_SM-G386T_Galaxy_AVANT_English_Health_Safety_KK_F1.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\cispremium_installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\cispremium_installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\CoDependenceIntoCoEmpowermentSession1.mp3.part:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\Conscious_Language_Code_MSLUC.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\Conscious_Language_Code_MSLUC.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\DJ1050_J410_1313-1.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\DJ1050_J410_1313-1.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\driver-updater-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\driver-updater-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\drivermax_7_67_cnet.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\Family Reunion 2015 brochure.docx:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\Family Reunion 2015 brochure.docx:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\HousecallLauncher64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\HousecallLauncher64.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\HPSupportSolutionsFramework-en-11.51.0048.msi:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\HPSupportSolutionsFramework-en-11.51.0048.msi:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\HWVendorDetection.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\HWVendorDetection.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\InstallScreencastOMatic-v2-1.8.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\InstallScreencastOMatic-v2-1.8.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\Intel Driver Update Utility Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\Intel Driver Update Utility Installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\kinakwii.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\kinakwii.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\LEXMARK_Pro700_wcr_64_en.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\LEXMARK_Pro700_wcr_64_en.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\Lightweight_Scouting_Dissertation.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\mbam-setup-2.1.8.1057.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\mbam-setup-2.1.8.1057.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\new bsa med.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\new bsa med.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\OalmLodgeClientInstaller-3.3.5.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\OalmLodgeClientInstaller-3.3.5.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\PandaCloudCleaner.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\PandaCloudCleaner.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\papa-francesco-motu-proprio_20130711_organi-giudiziari(1).pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\papa-francesco-motu-proprio_20130711_organi-giudiziari(1).pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\papa-francesco-motu-proprio_20130711_organi-giudiziari.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\papa-francesco-motu-proprio_20130711_organi-giudiziari.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\PathToFreedom.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\PathToFreedom.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\Shockwave_Installer_Slim.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\Shockwave_Installer_Slim.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\SKMBT_C45215012611230.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\SKMBT_C45215012611230.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\SkypeSetup_6.14.0.104.msi:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\SlimDrivers-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\SlimDrivers-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\The_4_Forces_of_Health_Module_1.mp3.part:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\TrendMicro_MAX_10.0_US-en_Downloader.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\usb140201.zip:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\usb140201.zip:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\ViberSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\ViberSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\vlc-2.1.5-win64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\vlc-2.1.5-win64.exe:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\wgm-masterclass-2015jun-workbook.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\wgm-masterclass-2015jun-workbook.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Eddy\Downloads\WindowsPasswordResetStandardDemoSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Eddy\Downloads\WindowsPasswordResetStandardDemoSetup.exe:$CmdZnID
EmptyTemp:
CMD: bitsadmin /reset /allusers
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupApproved" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupApproved" /F
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F