Notes
Notes - notes.io |
[13:03:52] ======== SYSTEM INFO ========
[13:03:52] WIN ARCH: x64
[13:03:52] WIN VER: 6.1.7601
[13:03:52] CORE COUNT: 4
[13:03:52] MEM TOTAL: 2039 Mb.
[13:03:52] MEM AVAIL: 189 Mb.
[13:03:52] IS DOMAIN: No
[13:03:52] LOCAL SYS: No
[13:03:52] ELEVATED: Yes
[13:03:52] HAS ADMIN: Yes
[13:03:52] PC NAME: SERVER
[13:03:52] USER NAME: Administrator
[13:03:52] IN GROUPS:
[13:03:52] SERVERNone
[13:03:52] Everyone
[13:03:52] BUILTINAdministrators
[13:03:52] BUILTINUsers
[13:03:52] NT AUTHORITYREMOTE INTERACTIVE LOGON
[13:03:52] NT AUTHORITYINTERACTIVE
[13:03:52] NT AUTHORITYAuthenticated Users
[13:03:52] NT AUTHORITYThis Organization
[13:03:52]
[13:03:52] LOCAL
[13:03:52] NT AUTHORITYNTLM Authentication
[13:03:52] <Integrity> Zorunlu EtiketYüksek Zorunlu Düzey
[13:03:52] =============================
[13:03:52] CMDLINE: "C:UsersAdministratorAppDataLocalTemp47ZipSfx.000encrypt12son.exe" -e all -sd -log all -vis
[13:03:52] [*] 23 privileges granted, 0 failed.
[13:03:52] [*] CLONE INFO: I'm original process!
[13:03:52] =============================
[13:03:52] [+] Success run: "C:UsersAdministratorAppDataLocalencrypt12sonencrypt12son.exe" -e all -sd -log all -vis
[13:03:52] [+] Re-launch success.
[13:03:53] [*] Logging ON
[13:03:53] ======== SYSTEM INFO ========
[13:03:53] WIN ARCH: x64
[13:03:53] WIN VER: 6.1.7601
[13:03:53] CORE COUNT: 4
[13:03:53] MEM TOTAL: 2039 Mb.
[13:03:53] MEM AVAIL: 179 Mb.
[13:03:53] IS DOMAIN: No
[13:03:53] LOCAL SYS: No
[13:03:53] ELEVATED: Yes
[13:03:53] HAS ADMIN: Yes
[13:03:53] PC NAME: SERVER
[13:03:53] USER NAME: Administrator
[13:03:53] IN GROUPS:
[13:03:53] SERVERNone
[13:03:53] Everyone
[13:03:53] BUILTINAdministrators
[13:03:53] BUILTINUsers
[13:03:53] NT AUTHORITYREMOTE INTERACTIVE LOGON
[13:03:53] NT AUTHORITYINTERACTIVE
[13:03:53] NT AUTHORITYAuthenticated Users
[13:03:53] NT AUTHORITYThis Organization
[13:03:53]
[13:03:53] LOCAL
[13:03:53] NT AUTHORITYNTLM Authentication
[13:03:53] <Integrity> Zorunlu EtiketYüksek Zorunlu Düzey
[13:03:53] =============================
[13:03:53] CMDLINE: "C:UsersAdministratorAppDataLocalencrypt12sonencrypt12son.exe" -e all -sd -log all -vis
[13:03:53] [*] 23 privileges granted, 0 failed.
[13:03:53] [*] CLONE INFO: I'm a clone!
[13:03:53] =============================
[13:03:53] [+] Success run: "C:UsersAdministratorAppDataLocalencrypt12sonEverything.exe" -startup
[13:03:53] [+] Success run: "C:UsersAdministratorAppDataLocalencrypt12sonencrypt12son.exe" -e watch -pid 4252 -vis -! -e all -sd -log all -vis
[13:25:51] [+] Success run: powercfg.exe -H off
[13:25:51] [+] Success run: powercfg.exe -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
[13:25:52] [+] Success run: powercfg.exe -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
[13:25:52] [+] Success run: powercfg.exe -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
[13:25:52] [+] Success run: powercfg.exe -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
[13:25:52] [+] Success run: powercfg.exe -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
[13:25:52] [+] Success run: powercfg.exe -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
[13:25:52] [+] Success run: powercfg.exe -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
[13:25:52] [+] Success run: powercfg.exe -S 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
[13:25:52] [+] Success run: powercfg.exe -S e9a42b02-d5df-448d-aa00-03f14749eb61
[13:25:52] [-] Failed to clear Recycle Bin! GetLastError = 0
[13:25:52] [+] Delete Shadow Copies
[13:25:52] [*] Loading hidden partitions
[13:25:52] [+] Failed to run: wbadmin.exe delete catalog -quiet! GetLastError = 2.
[13:25:52] [+] Mounted partition: Z: <- \?Volume{ab2ec9b8-e668-11ec-8291-806e6f6e6963}
[13:25:52] [+] Failed to run: wbadmin.exe DELETE SYSTEMSTATEBACKUP! GetLastError = 2.
[13:25:52] =============================
[13:25:52] [*] Found 5 drives:
[13:25:52] [*] C: - 75874 Mb. free (NTFS)
[13:25:52] [*] E: - 70 Mb. free (NTFS)
[13:25:52] [*] F: - 61949 Mb. free (NTFS)
[13:25:52] [*] G: - 3441 Mb. free (NTFS)
[13:25:52] [*] Z: - 71 Mb. free (NTFS)
[13:25:52] =============================
[13:25:52] [+] Success run: bcdedit.exe /set {default} recoveryenabled no
[13:25:52] [*] Starting search with Everything...
[13:25:52] [+] Success run: bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures
[13:25:52] [*] 1000 files processed.
[13:25:52] [*] 2000 files processed.
[13:25:52] [*] 3000 files processed.
[13:25:52] [*] 4000 files processed.
[13:25:52] [*] 5000 files processed.
[13:26:22] [*] 6000 files processed.
[13:26:22] [*] 7000 files processed.
[13:26:53] [*] 1000 files processed.
[13:26:53] [*] 2000 files processed.
[13:28:32] [-] Failed to crypt F:UsersdepoDocuments....xls! Error = Not renamed. Maybe file is buzy.
[13:28:36] [*] 3000 files processed.
[13:28:36] [*] 4000 files processed.
[13:28:36] [*] 5000 files processed.
[13:29:39] [-] Failed to crypt C:VegaWinBinDesign5YTRT.xls! Error = Not renamed. Maybe file is buzy.
[13:29:39] [-] Failed to crypt F:VegaWinBinDesign5YTRT.xls! Error = Not renamed. Maybe file is buzy.
[13:29:40] [-] Failed to crypt C:UsersdepoDesktop629 k.xls! Error = Not renamed. Maybe file is buzy.
[13:29:40] [-] Failed to crypt F:UsersdepoDesktop629 k.xls! Error = Not renamed. Maybe file is buzy.
[13:29:42] [-] Failed to crypt C:Program Files7-Zip7zFM.exe! Error = Not renamed. Maybe file is buzy.
[13:30:12] [*] Killing blocking process: Windows İşlem Etkinleştirme Hizmeti (pid:1680)
[13:30:13] [*] 6000 files processed.
[13:30:13] [*] 7000 files processed.
[13:30:13] [-] Can't open file C:inetpubtempappPoolsAPC3590.tmp! GetLastError = 2
[13:30:30] [-] Failed KillFileOwner: Z:BootBCD! GetLastError = 87.
[13:31:02] [*] 8000 files processed.
[13:31:02] [*] 9000 files processed.
[13:31:02] [*] 10000 files processed.
[13:32:18] [*] 11000 files processed.
[13:32:18] [*] 12000 files processed.
[13:32:46] [-] Can't open file C:inetpubtempappPoolsDefaultAppPoolDefaultAppPool.config! GetLastError = 3
[13:32:48] [-] Failed to crypt C:VegaWinBinDepoSevkiyat.exe! Error = Not renamed. Maybe file is buzy.
[13:32:48] [-] Failed to crypt F:VegaWinBinDepoSevkiyat.exe! Error = Not renamed. Maybe file is buzy.
[13:32:52] [-] Failed to crypt C:VegaWinBinDesigndgfhg.xls! Error = Not renamed. Maybe file is buzy.
[13:32:52] [-] Failed to crypt F:VegaWinBinDesigndgfhg.xls! Error = Not renamed. Maybe file is buzy.
[13:32:55] [-] Failed to crypt C:VegaWinBinDesigndsfds.xls! Error = Not renamed. Maybe file is buzy.
[13:32:55] [-] Failed to crypt F:VegaWinBinDesigndsfds.xls! Error = Not renamed. Maybe file is buzy.
[13:33:06] [*] Killing blocking process: Event (pid:6004)
[13:33:11] [*] 13000 files processed.
[13:33:11] [*] 14000 files processed.
[13:33:11] [*] 15000 files processed.
[13:33:24] [*] Killing blocking process: Google Crash Handler (pid:1088)
[13:33:24] [*] Killing blocking process: Google Crash Handler (pid:2624)
[13:33:36] [-] Failed to crypt C:VegaWinBinHesapSablonu.exe! Error = Not renamed. Maybe file is buzy.
[13:33:36] [-] Failed to crypt F:VegaWinBinHesapSablonu.exe! Error = Not renamed. Maybe file is buzy.
[13:33:37] [-] Failed to crypt C:VegaWinBinHizliSiparis.exe! Error = Not renamed. Maybe file is buzy.
[13:33:37] [-] Failed to crypt F:VegaWinBinHizliSiparis.exe! Error = Not renamed. Maybe file is buzy.
[13:33:41] [*] 16000 files processed.
[13:33:41] [*] 17000 files processed.
[13:33:58] [-] Failed to crypt C:inetpubwwwrootiisstart.htm! Error = Not renamed. Maybe file is buzy.
[13:33:58] [-] Failed to crypt F:inetpubwwwrootiisstart.htm! Error = Not renamed. Maybe file is buzy.
[13:34:05] [-] Failed to crypt C:VegaWinDesignIRMAKLAR .FRF! Error = Not renamed. Maybe file is buzy.
[13:34:05] [-] Failed to crypt F:VegaWinDesignIRMAKLAR .FRF! Error = Not renamed. Maybe file is buzy.
[13:34:27] [*] 18000 files processed.
[13:34:27] [*] 19000 files processed.
[13:34:27] [*] 20000 files processed.
[13:35:05] [*] 21000 files processed.
[13:35:05] [*] 22000 files processed.
[13:35:09] [-] Failed KillFileOwner: C:tempMIMIC_LOG.txt! GetLastError = 0.
[13:35:26] [*] 23000 files processed.
[13:35:26] [*] 24000 files processed.
[13:35:29] [*] 25000 files processed.
[13:35:57] [-] Failed to crypt G:vega kurProfessionalKur.exe! Error = Not renamed. Maybe file is buzy.
[13:36:03] [*] 26000 files processed.
[13:36:03] [*] 27000 files processed.
[13:36:28] [*] 28000 files processed.
[13:36:28] [*] 29000 files processed.
[13:36:28] [*] 30000 files processed.
[13:36:29] [-] Failed to crypt C:Program FilesWinRARRar.exe! Error = Not renamed. Maybe file is buzy.
[13:36:29] [-] Failed to crypt C:Program FilesWinRARrar.lng! Error = Not renamed. Maybe file is buzy.
[13:36:29] [-] Failed to crypt C:Program FilesWinRARRar.txt! Error = Not renamed. Maybe file is buzy.
[13:36:39] [-] Failed to crypt C:VegaWinBinRiskYonetimi.exe! Error = Not renamed. Maybe file is buzy.
[13:36:39] [-] Failed to crypt F:VegaWinBinRiskYonetimi.exe! Error = Not renamed. Maybe file is buzy.
[13:37:22] [*] Killing blocking process: vgShell (pid:3420)
[13:37:29] [*] 31000 files processed.
[13:37:29] [*] Everything Scan finished.
[13:37:29] [*] Exiting thread search...
[13:37:29] [*] Added STOP MARKER to local thread.
[13:37:33] [-] Failed to crypt C:VegaWinBinstyleBuilder.exe! Error = Not renamed. Maybe file is buzy.
[13:37:33] [-] Failed to crypt F:VegaWinBinstyleBuilder.exe! Error = Not renamed. Maybe file is buzy.
[13:37:34] [-] Failed KillFileOwner: C:System Volume InformationSyscache.hve! GetLastError = 87.
[13:37:34] [-] Failed KillFileOwner: C:System Volume InformationSyscache.hve.LOG1! GetLastError = 87.
[13:37:42] [-] Failed to crypt C:VegaWinBinDesignthyjh.xls! Error = Not renamed. Maybe file is buzy.
[13:37:42] [-] Failed to crypt F:VegaWinBinDesignthyjh.xls! Error = Not renamed. Maybe file is buzy.
[13:37:43] [-] Failed to crypt C:VegaWinBinTopCariTanim.exe! Error = Not renamed. Maybe file is buzy.
[13:37:43] [-] Failed to crypt F:VegaWinBinTopCariTanim.exe! Error = Not renamed. Maybe file is buzy.
[13:37:47] [-] Failed to crypt F:VegaWinstarmailTurkish.frl! Error = Not renamed. Maybe file is buzy.
[13:37:47] [-] Failed to crypt C:VegaWinBinDesigntyhyy.xls! Error = Not renamed. Maybe file is buzy.
[13:37:47] [-] Failed to crypt F:VegaWinBinDesigntyhyy.xls! Error = Not renamed. Maybe file is buzy.
[13:37:59] [-] Failed to crypt C:VegaWinBinDesignuyyuy.xls! Error = Not renamed. Maybe file is buzy.
[13:37:59] [-] Failed to crypt F:VegaWinBinDesignuyyuy.xls! Error = Not renamed. Maybe file is buzy.
[13:38:01] [-] Failed to crypt C:VegaWinBinVeCalculator.exe! Error = Not renamed. Maybe file is buzy.
[13:38:01] [-] Failed to crypt F:VegaWinBinVeCalculator.exe! Error = Not renamed. Maybe file is buzy.
[13:49:40] [-] Failed to crypt C:Program FilesWinRARZip.SFX! Error = Not renamed. Maybe file is buzy.
[13:49:40] [*] Local Scan completed.
[13:49:40] [*] Network Scan completed.
[13:49:40] [*] Cleaning disk space
[13:49:40] [+] Success run: "C:UsersAdministratorAppDataLocalencrypt12sonsdel64.exe" -accepteula -p 3 -c C:
|
|
Notes.io is a web-based application for taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000 notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 12 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
