--------------- QuickScript | g3n-h@ckm@n | 2_12.08.2016.1 ---------------

----- XP | Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- - Start 01/09/2016 07:44:36

Updated 12/08/2016 | 12.00 by g3n-h@ckm@n
Contact : http://www.sosvirus.net/

Time Zone : (UTC+01:00) Bruxelles, Copenhague, Madrid, Paris
[Dr CARRIBON (Administrator)] - [DRCARRIBON-PC] (S-1-5-21-1519099712-2411528038-34804761-1000)

System: Microsoft Windows 7 Édition Starter - Service Pack 1 - (6.1.7601) - BuildType: Multiprocessor Free - OSLanguage: 1036 (040c)
System: AutoReboot: True - DebugFilePath: %SystemRoot%\MEMORY.DMP - KernelDumpOnly: False - OverwriteExistingDebugFile: True - WriteDebugInfo: True - WriteToSystemLog: True
Boot : Microsoft Windows 7 Édition Starter |C:\Windows|\Device\Harddisk0\Partition3
Boot : Normal boot
PC: AOD255 - Acer - IdNumber: LUSDG0D0170426EC0E1601 - UUID: 364EE69C-9C82-9CB1-2111-1C750822B622
Processor : X64 - 1662 Mhz - Intel(R) Atom(TM) CPU N450 @ 1.66GHz
InsydeH2O Version V3.08(DDR2) - - Acer - S/N: LUSDG0D0170426EC0E1601 - V3.08(DDR2) - ACRSYS - 1
CoreTemp : 53 Celsius

----------| Script

1608 | [Owner : |Parent : 696(services.exe)] - (.Microsoft Corporation - Application sous-système spouleur.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1804 | [Owner : Système |Parent : 696(services.exe)] - (.Microsoft Corp. - Bing Desktop updating service.) - (1.4.167.0) = C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe
1888 | [Owner : Système |Parent : 696(services.exe)] - (.Dritek System Inc. - Dritek WMI Service.) - (2.8.0.854) = C:\Program Files\Launch Manager\dsiwmis.exe
1924 | [Owner : Système |Parent : 696(services.exe)] - (.Acer Incorporated - ePowerSvc.) - (5.0.3005.0) = C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
1992 | [Owner : Système |Parent : 696(services.exe)] - (.ArcticLine Software - FileMarker.NET Apply Icon Service.) - (1.0.1.0) = C:\Program Files\FileMarker.NET\FileMarkerService.exe
248 | [Owner : Système |Parent : 696(services.exe)] - (.Acer Incorporated - Global Registration Service.) - (1.0.0.1) = C:\Program Files\Acer\Registration\GREGsvc.exe
380 | [Owner : Système |Parent : 696(services.exe)] - (.McAfee, Inc. - McAfee Process Validation Service.) - (15.1.0.684) = C:\Program Files\Common Files\mcafee\systemcore\mfevtps_IObitDel.exe
468 | [Owner : Système |Parent : 696(services.exe)] - (.Rebit, Inc. - Rebit Pro Backup Service.) - (5.1.3001.14505) = C:\Program Files\Rebit\Rebit Pro\Rebit-Pro-Svc.exe
1216 | [Owner : Système |Parent : 696(services.exe)] - (. - Reason Core Security Bundle Protection.) - (1.0.1.0) = C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
1468 | [Owner : Système |Parent : 696(services.exe)] - (.Reason Software Company Inc. - Reason Core Security Engine Service.) - (1.1.1.0) = C:\Program Files\Reason\Security\rsEngineSvc.exe
1348 | [Owner : Système |Parent : 696(services.exe)] - (.Acer Incorporated - Raw Socket Service.) - (4.5.3000.9285) = C:\Program Files\Acer\Acer VCM\RS_Service.exe
1680 | [Owner : Système |Parent : 696(services.exe)] - (.SFR - SFR.DashBoard.Service.) - (3.0.0.0) = C:\Program Files\SFR\Gestionnaire de Connexion\SFR.DashBoard.Service.exe
1716 | [Owner : Système |Parent : 696(services.exe)] - (.Acer Group - Updater Service.) - (1.0.0.8) = C:\Program Files\Acer\Acer Updater\UpdaterService.exe
2204 | [Owner : Système |Parent : 696(services.exe)] - (.McAfee, Inc. - McAfee Core Firewall Service.) - (15.1.0.684) = C:\Program Files\Common Files\mcafee\systemcore\mfefire_IObitDel.exe
3724 | [Owner : SERVICE LOCAL |Parent : 1072(svchost.exe)] - (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe
4084 | [Owner : Dr CARRIBON |Parent : 696(services.exe)] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
2392 | [Owner : Dr CARRIBON |Parent : 1216()] - (. - Reason Core Security Bundle Protection.) - (1.0.1.0) = C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
2420 | [Owner : Dr CARRIBON |Parent : 1148(svchost.exe)] - (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
1012 | [Owner : Dr CARRIBON |Parent : 2420(taskeng.exe)] - (.Glarysoft Ltd - Glary SoftwareUpdatePro.) - (5.38.0.32) = C:\Program Files\Glarysoft\Software Update Pro\SoftwareUpdatePro.exe
3900 | [Owner : Système |Parent : 696(services.exe)] - (.Intel Corporation - IAStorDataSvc.) - (9.6.4.1002) = C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
3132 | [Owner : Dr CARRIBON |Parent : 1148(svchost.exe)] - (.Microsoft Corporation - Windows Update.) - (7.6.7601.19161) = C:\Windows\System32\wuauclt.exe
3188 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Wondershare - Wondershare Studio.) - (2.5.0.0) = C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
2536 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Microsoft Corp. - Bing Desktop Application.) - (1.4.167.0) = C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe
3512 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Glarysoft Ltd - Glarysoft MalwareHunterTray.) - (1.0.0.26) = C:\Program Files\Glarysoft\Malware Hunter\mhtray.exe
3104 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Disc Soft Ltd - DAEMON Tools Shell Extensions Helper.) - (7.1.0.595) = C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
2628 | [Owner : Dr CARRIBON |Parent : 2420()] - (.Glarysoft Ltd - Glarysoft MalwareHunter.) - (1.18.0.32) = C:\Program Files\Glarysoft\Malware Hunter\MalwareHunter.exe
3820 | [Owner : Système |Parent : 696(services.exe)] - (.Disc Soft Ltd - Disc Soft Bus Service.) - (7.1.0.595) = C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe
1092 | [Owner : SERVICE RÉSEAU |Parent : 696(services.exe)] - (.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
3304 | [Owner : Dr CARRIBON |Parent : 852(svchost.exe)] - (.Microsoft Corp. - BDExtHost.exe.) - (1.4.167.0) = C:\Program Files\Microsoft\BingDesktop\BDExtHost.exe
1672 | [Owner : Dr CARRIBON |Parent : 852(svchost.exe)] - (.Microsoft Corp. - BDAppHost.exe.) - (1.4.167.0) = C:\Program Files\Microsoft\BingDesktop\BDAppHost.exe
2200 | [Owner : Dr CARRIBON |Parent : 852(svchost.exe)] - (.Microsoft Corp. - BDRuntimeHost.exe.) - (1.4.167.0) = C:\Program Files\Microsoft\BingDesktop\BDRuntimeHost.exe
5340 | [Owner : Dr CARRIBON |Parent : 852(svchost.exe)] - (.Intel Corporation - igfxsrvc Module.) - (8.14.10.2117) = C:\Windows\System32\igfxsrvc.exe
5672 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Reason Software Company Inc. - Reason Core Security UI.) - (1.1.1.0) = C:\Program Files\Reason\Security\rsUI.exe
5004 | [Owner : Dr CARRIBON |Parent : 2076(explorer.exe)] - (.Microsoft Corporation - Bloc-notes.) - (6.1.7601.18917) = C:\Windows\System32\notepad.exe
C:\Program Files\Common Files\Lavasoft Moved Successfully
C:\Program Files\Common Files\mcafee Moved Successfully
C:\Program Files\ESET Moved Successfully
C:\Users\Public\CyberLink Moved Successfully
E:\Android Moved Successfully
F:\Android Moved Successfully
I:\Android Moved Successfully
K:\Alarms Moved Successfully
K:\Android Not Moved ! -> Reboot !
K:\Ringtones Moved Successfully

-------------- | CleanDisk :

FreeSpace : 190189
Cleaning.......
FreeSpace : 190117

¤¤¤¤¤¤¤¤¤ | Replace

Replacement At Reboot : C:\Winlogon.exe -> C:\Windows\System32\Winlogon.exe

-------------- | Hosts :

Hosts : Reseted

----------(EOF)----------