--------------- QuickScript | g3n-h@ckm@n | V5_29.10.19.1 ---------------

----- XP | Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- - Start 05/11/2023 11:05:28

Updated 29/10/2019 | 06:45 (GMT) by g3n-h@ckm@n
Contact : http://www.sosvirus.net/

Time Zone : (UTC+01:00) Brussels, Copenhagen, Madrid, Paris

Registry saved : C:\QuickDiag\Save\Registry [05.11.2023 @ 11_05_31]

1408 | [Owner : SYSTEM |Parent : 584(services.exe)] - (.Microsoft Corporation - Spooler SubSystem App.) - (6.3.9600.17415) = C:\Windows\System32\spoolsv.exe
1604 | [Owner : SYSTEM |Parent : 584(services.exe)] - (.Microsoft Corporation - Antimalware Service Executable.) - (4.5.218.0) = C:\Program Files\Windows Defender\MsMpEng.exe
1696 | [Owner : LOCAL SERVICE |Parent : 908(svchost.exe)] - (.Microsoft Corporation - Device Association Framework Provider Host.) - (6.3.9600.17415) = C:\Windows\System32\dasHost.exe
2200 | [Owner : LOCAL SERVICE |Parent : 908(svchost.exe)] - (.Microsoft Corporation - Windows Driver Foundation - User-mode Driver Framework Host Process.) - (6.3.9600.17415) = C:\Windows\System32\WUDFHost.exe
1912 | [Owner : LOCAL SERVICE |Parent : 924(svchost.exe)] - (.Microsoft Corporation - Host Process for Windows Tasks.) - (6.3.9600.17415) = C:\Windows\System32\taskhost.exe
120 | [Owner : SYSTEM |Parent : 1248()] - (.Advanced Micro Devices, Inc. - CATALYST Control Center.) - (8.97.100.300) = C:\PROGRA~1\AMD\CCC2\Install\ccc2_install.exe
2456 | [Owner : SYSTEM |Parent : 584(services.exe)] - (.AMD - AMD External Events Service Module.) - (6.14.11.1164) = C:\Windows\System32\atiesrxx.exe
2296 | [Owner : SYSTEM |Parent : 2456()] - (.AMD - AMD External Events Client Module.) - (6.14.11.1164) = C:\Windows\System32\atieclxx.exe
1104 | [Owner : SYSTEM |Parent : 120()] - (. - .) - (0.0.0.0) = C:\AMD\WU-CCC2\ccc2_install\WULaunchApp.exe
1040 | [Owner : SYSTEM |Parent : 1104()] - (. - .) - (0.0.0.0) = C:\AMD\WU-CCC2\ccc2_install\Support64\CCC2App64.exe
2360 | [Owner : efm |Parent : 924(svchost.exe)] - (.Microsoft Corporation - Host Process for Windows Tasks.) - (6.3.9600.17415) = C:\Windows\System32\taskhostex.exe
1144 | [Owner : efm |Parent : 1920()] - (.Microsoft Corporation - Microsoft® Windows System Restore.) - (6.3.9600.17415) = C:\Windows\System32\rstrui.exe
2220 | [Owner : NETWORK SERVICE |Parent : 584(services.exe)] - (.Microsoft Corporation - Windows Media Player Network Sharing Service.) - (12.0.9600.17415) = C:\Program Files\Windows Media Player\wmpnetwk.exe
172 | [Owner : efm |Parent : 1756(explorer.exe)] - (.Microsoft Corporation - Microsoft Management Console.) - (6.3.9600.17415) = C:\Windows\System32\mmc.exe
3184 | [Owner : SYSTEM |Parent : 584(services.exe)] - (.Microsoft Corporation - Virtual Disk Service.) - (6.3.9600.17415) = C:\Windows\System32\vds.exe
3128 | [Owner : efm |Parent : 1756(explorer.exe)] - (.Microsoft Corporation - Notepad.) - (6.3.9600.17415) = C:\Windows\System32\notepad.exe
672 | [Owner : efm |Parent : 1756(explorer.exe)] - (.Microsoft Corporation - Internet Explorer.) - (11.0.9600.17416) = C:\Program Files\Internet Explorer\iexplore.exe
4008 | [Owner : efm |Parent : 672(iexplore.exe)] - (.Microsoft Corporation - Internet Explorer.) - (11.0.9600.17416) = C:\Program Files (x86)\Internet Explorer\iexplore.exe
2368 | [Owner : efm |Parent : 676(svchost.exe)] - (.Microsoft Corporation - Input Personalization Server.) - (6.3.9600.17415) = C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
2896 | [Owner : efm |Parent : 676(svchost.exe)] - (.Microsoft Corporation - Runtime Broker.) - (6.3.9600.17415) = C:\Windows\System32\RuntimeBroker.exe
2572 | [Owner : efm |Parent : 676(svchost.exe)] - (.Adobe Systems Incorporated - Adobe® Flash® Player Utility.) - (15.0.0.189) = C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
2780 | [Owner : NETWORK SERVICE |Parent : 2488()] - (.Microsoft Corporation - Microsoft Malware Protection Command Line Utility.) - (4.5.218.0) = C:\Program Files\Windows Defender\MpCmdRun.exe
3536 | [Owner : efm |Parent : 1756(explorer.exe)] - (.OldTimer Tools - .) - (3.1.21.0) = C:\Users\efm\Desktop\OTM.exe
2824 | [Owner : efm |Parent : 512(winlogon.exe)] - (.Microsoft Corporation - Windows Assistive Technology Manager.) - (6.3.9600.17415) = C:\Windows\System32\AtBroker.exe
332 | [Owner : efm |Parent : 2824(AtBroker.exe)] - (.Microsoft Corporation - Accessibility On-Screen Keyboard.) - (6.3.9600.17415) = C:\Windows\System32\osk.exe
4036 | [Owner : SYSTEM |Parent : 584(services.exe)] - (.Microsoft Corporation - Windows Modules Installer.) - (6.3.9600.17415) = C:\Windows\servicing\TrustedInstaller.exe
3364 | [Owner : SYSTEM |Parent : 676(svchost.exe)] - (.Microsoft Corporation - Windows Modules Installer Worker.) - (6.3.9600.17031) = C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe
D:/19 - obsiblue (1).mp4 Not Moved ! -> Reboot !
E:/E blues - for timidité anti fjbb même hors vari. 3 Not Moved ! -> Reboot !
P:/ Not Found !
J:/ Not Found !
D:/19 - obsiblue (1).mp4 Not Moved ! -> Reboot !
E:/Blue J - souvenirs du passé Moved Successfully
E:/E blues - for timidité anti fjbb même hors vari. 3 Not Moved ! -> Reboot !
L:/Ashampoo_Snap_vendredi 24 mars 2023_17h42m44s_001_.wmv Moved Successfully
M:/Ashampoo_Snap_vendredi 24 Not Found !

----------(EOF)----------