--------------- QuickScript | g3n-h@ckm@n | 2_12.08.2016.1 --------------- ----- XP | Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- - Start 21/08/2016 12:28:47 Updated 12/08/2016 | 12.00 by g3n-h@ckm@n Contact : http://www.sosvirus.net/ Time Zone : (UTC+01:00) Bruxelles, Copenhague, Madrid, Paris [Jean-Marie (Administrator)] - [LFS_ULTRA] (S-1-5-21-3042704910-407304991-3750219112-1001) System: Microsoft Windows 10 Professionnel - - (10.0.14393) - BuildType: Multiprocessor Free - OSLanguage: 1036 (040c) System: AutoReboot: True - DebugFilePath: %SystemRoot%\MEMORY.DMP - KernelDumpOnly: False - OverwriteExistingDebugFile: True - WriteDebugInfo: True - WriteToSystemLog: True Boot : Microsoft Windows 10 Professionnel|C:\WINDOWS|\Device\Harddisk0\Partition4 Boot : Normal boot PC: CQ2904EF - Hewlett-Packard - IdNumber: 4CH3100VPJ - UUID: 2C238515-5AA2-7984-51F0-370493363EDB Processor : X64 - 1397 Mhz - AMD E1-1200 APU with Radeon(tm) HD Graphics 8.17 - fra - AMI - S/N: 4CH3100VPJ - 8.17 - HPQOEM - 1072009 CoreTemp : ? Celsius ----------| Script 8288 | [Owner : |Parent : 748(services.exe)] - (.Microsoft Corporation - Antimalware Service Executable.) - (4.10.14393.0) = C:\Program Files\Windows Defender\MsMpEng.exe 10272 | [Owner : Jean-Marie |Parent : 4764()] - (.SosVirus - Process Killer.) - (1.0.0.3) = V:\barrow 2 & widen 100% sécurisé\sosvirus app for stop all power2go 11 process for facilite iobit unlocker work\processclose_1.0.0.3.exe 1496 | [Owner : SERVICE LOCAL |Parent : 1076(svchost.exe)] - (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (10.0.14393.0) = C:\Windows\System32\WUDFHost.exe 6224 | [Owner : Système |Parent : 748(services.exe)] - (. - .) - (8.0.0.8337) = C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe 5024 | [Owner : Jean-Marie |Parent : 6224(schedul2.exe)] - (. - .) - (8.0.0.8337) = C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe 8456 | [Owner : Jean-Marie |Parent : 844(svchost.exe)] - (.Microsoft Corporation - Runtime Broker.) - (10.0.14393.0) = C:\Windows\System32\RuntimeBroker.exe 1524 | [Owner : Système |Parent : 748(services.exe)] - (. - .) - (19.0.0.2350) = C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe 9208 | [Owner : Jean-Marie |Parent : 540(svchost.exe)] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) - (10.0.14393.0) = C:\Windows\System32\taskhostw.exe 2104 | [Owner : SERVICE RÉSEAU |Parent : 8100()] - (.Microsoft Corporation - Microsoft Malware Protection Command Line Utility.) - (4.10.14393.0) = C:\Program Files\Windows Defender\MpCmdRun.exe 2536 | [Owner : Jean-Marie |Parent : 10612(explorer.exe)] - (.AoaoPhoto Digital Studio - Professional video watermarking program.) - (5.1.0.0) = C:\Users\Jean-Marie\Documents\AoaoPhoto Digital Studio\Video Watermark Pro\VideoWatermark.exe 11100 | [Owner : Jean-Marie |Parent : 844(svchost.exe)] - (.Microsoft Corporation - Host Process for Setting Synchronization.) - (10.0.14393.0) = C:\Windows\System32\SettingSyncHost.exe 7212 | [Owner : Jean-Marie |Parent : 540(svchost.exe)] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) - (10.0.14393.0) = C:\Windows\System32\taskhostw.exe 9508 | [Owner : Jean-Marie |Parent : 7212(taskhostw.exe)] - (.Microsoft Corporation - Outil Diagnostic de fuite de ressource Microsoft Windows.) - (10.0.14393.0) = C:\Windows\SysWOW64\rdrleakdiag.exe 8196 | [Owner : Jean-Marie |Parent : 844(svchost.exe)] - (.Microsoft Corporation - SmartScreen.) - (10.0.14393.0) = C:\Windows\System32\smartscreen.exe 6720 | [Owner : Jean-Marie |Parent : 10612(explorer.exe)] - (.Microsoft Corporation - Bloc-notes.) - (10.0.14393.0) = C:\Windows\System32\notepad.exe C:\Users\Jean-Marie\Downloads\PCKeeper Installer.exe Moved Successfully C:\Users\Jean-Marie\Downloads\setup.exe Moved Successfully C:\Users\Jean-Marie\Documents\PC Speed Maximizer Moved Successfully C:\Program Files (x86)\iolo Moved Successfully V:\Alarms Moved Successfully -------------- | CleanDisk : FreeSpace : 879986 Cleaning....... FreeSpace : 880284 -------------- | Hosts : Hosts : Reseted ----------(EOF)----------