Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by David (administrator) on ELEVADID on 27-06-2015 02:23:12
Running from C:\Users\David\Downloads
Loaded Profiles: David (Available Profiles: David & David 2 & Administrator)
Platform: Windows 8.1 (Update 1) (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Qihu Software Co. Limited) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\PatchUp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17031_none_fa50b3979b1bcb4a\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(NirSoft) C:\Users\David\Desktop\cports\cports.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3276104 2014-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-07-06] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-07-06] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10841584 2014-07-06] (Lenovo(beijing) Limited)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-25] (Flexera Software LLC.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\360Tray.exe [287352 2015-05-18] (QIHU 360 SOFTWARE CO. LIMITED)
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\...\Run: [Spotify Web Helper] => C:\Users\David\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-26] (Spotify Ltd)
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\...\Run: [KakaoTalk] => C:\Program Files (x86)\Kakao\KakaoTalk\KakaoTalk.exe [5901464 2015-06-15] (Daum Kakao Corp. )
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53272192 2015-06-16] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://home.lenovo.com
HKU\S-1-5-21-3209958707-3427003406-1755347824-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://home.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 210.220.163.82 219.250.36.130

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-17] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-17] (Intel Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2013-12-13] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-26] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-26]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-26]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-26]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-26]
CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-26]
CHR Extension: (Google Sheets) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-26]
CHR Extension: (AdBlock) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-06-26]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-26]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-26]
CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-26]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S2 DAMSvc; C:\Program Files (x86)\Nuance\DragonAssistant3\DragonAssistantMaintenance.exe [4279056 2014-02-25] (Nuance Communications, Inc.)
S2 ETDService; C:\Program Files\Elantech\ETDService.exe [101680 2013-10-15] (ELAN Microelectronics Corp.)
S2 iBtSiva; c:\windows\syswow64\ibtsiva.exe [121288 2014-03-11] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [296432 2014-04-16] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation)
S2 LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [389680 2014-07-06] (Lenovo(beijing) Limited)
S2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-07-06] (Lenovo(beijing) Limited)
S2 LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [70416 2014-07-06] (Lenovo)
S2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
S2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1844024 2013-12-18] (Maxthon)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-18] ()
S2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-13] (Nitro PDF Software)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [167176 2014-02-26] (PointGrab LTD)
S2 PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [512776 2014-02-26] (PointGrab LTD)
S2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-07-06] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2014-07-06] (Lenovo)
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [839792 2015-05-18] (QIHU 360 SOFTWARE CO. LIMITED)
S2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S3 TESHelper; c:\Program Files\Common Files\Lenovo\Magic Transfer\x64\MagicTransferTESHelper.exe [104696 2014-07-06] (Lenovo)
S2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2014-07-06] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-18] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [100424 2015-05-18] (360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [77896 2015-05-18] (360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305736 2015-05-18] (360.cn)
R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2015-05-18] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [314448 2015-05-18] (Qihu 360 Software Co., Ltd.)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [180816 2015-05-18] (Qihu 360 Software Co., Ltd.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [24904 2014-03-11] (ELAN Microelectronic Corp.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [142280 2013-10-19] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3433952 2014-02-19] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-28] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-10-24] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
S3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-27 02:24 - 2015-06-27 02:24 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-06-27 02:24 - 2015-06-26 19:08 - 00000000 ____D C:\Windows.old
2015-06-27 02:10 - 2015-06-27 02:23 - 00000000 ___HT C:\WINDOWS\wusa.lock
2015-06-27 02:10 - 2014-06-06 22:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-06-27 02:10 - 2014-06-06 21:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2015-06-27 02:06 - 2015-06-27 02:06 - 00104540 _____ C:\Users\David\Downloads\다운로드.htm
2015-06-27 02:04 - 2015-06-27 02:04 - 00001120 _____ C:\Users\David\Desktop\JRT.txt
2015-06-27 02:01 - 2015-06-27 02:01 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-ELEVADID-Windows-8.1-(64-bit).dat
2015-06-27 02:01 - 2015-06-27 02:01 - 00000000 ____D C:\RegBackup
2015-06-27 01:59 - 2015-06-27 01:59 - 00000000 ____D C:\$WINDOWS.~BT
2015-06-27 01:55 - 2015-06-27 01:57 - 00000000 ____D C:\AdwCleaner
2015-06-27 01:47 - 2015-06-27 01:47 - 02950453 _____ (Malwarebytes Corporation) C:\Users\David\Downloads\JRT.exe
2015-06-27 01:47 - 2015-06-27 01:47 - 02244096 _____ C:\Users\David\Downloads\AdwCleaner.exe
2015-06-27 01:41 - 2015-06-27 01:41 - 00030656 _____ C:\Users\David\Downloads\Addition.txt
2015-06-27 01:40 - 2015-06-27 02:23 - 00016562 _____ C:\Users\David\Downloads\FRST.txt
2015-06-27 01:40 - 2015-06-27 02:23 - 00000000 ____D C:\FRST
2015-06-27 01:39 - 2015-06-27 01:39 - 02112512 _____ (Farbar) C:\Users\David\Downloads\FRST64.exe
2015-06-27 00:56 - 2015-06-27 00:56 - 00000000 __SHD C:\Users\David\AppData\Local\EmieUserList
2015-06-27 00:56 - 2015-06-27 00:56 - 00000000 __SHD C:\Users\David\AppData\Local\EmieSiteList
2015-06-27 00:48 - 2015-06-27 00:49 - 00000000 ____D C:\Users\David\AppData\Local\SK Communications
2015-06-27 00:48 - 2015-06-27 00:48 - 00002212 _____ C:\Users\Public\Desktop\네이트온.lnk
2015-06-27 00:48 - 2015-06-27 00:48 - 00001052 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\토크온.lnk
2015-06-27 00:48 - 2015-06-27 00:48 - 00001028 _____ C:\Users\David\Desktop\토크온.lnk
2015-06-27 00:48 - 2015-06-27 00:48 - 00001028 _____ C:\Users\David 2\Desktop\토크온.lnk
2015-06-27 00:48 - 2015-06-27 00:48 - 00001028 _____ C:\Users\Administrator\Desktop\토크온.lnk
2015-06-27 00:48 - 2015-06-27 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\토크온
2015-06-27 00:48 - 2015-06-27 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\네이트온
2015-06-27 00:48 - 2015-06-27 00:48 - 00000000 ____D C:\Program Files (x86)\TALKON
2015-06-27 00:48 - 2015-06-27 00:48 - 00000000 ____D C:\Program Files (x86)\SK Communications
2015-06-27 00:47 - 2015-06-27 00:47 - 17261664 _____ ((C) SK Communications) C:\Users\David\Downloads\TALKON10.exe
2015-06-26 17:39 - 2015-06-27 02:04 - 00007599 _____ C:\Users\David\AppData\Local\Resmon.ResmonCfg
2015-06-26 11:14 - 2015-06-26 11:14 - 00001645 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2015-06-26 11:14 - 2015-06-26 11:14 - 00000000 ____D C:\Riot Games KR
2015-06-26 11:14 - 2015-06-26 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-06-26 11:14 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2015-06-26 11:14 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2015-06-26 11:14 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-06-26 11:14 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-06-26 11:14 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-06-26 11:12 - 2015-06-26 11:12 - 00000000 ____D C:\Users\David\AppData\Roaming\Riot Games
2015-06-26 11:11 - 2015-06-26 11:11 - 00000424 _____ C:\Users\David\Desktop\This PC - Shortcut.lnk
2015-06-26 10:58 - 2015-06-26 17:28 - 00000000 __SHD C:\ProgramData\360Quarant
2015-06-26 10:58 - 2015-06-26 17:28 - 00000000 __SHD C:\$360Section
2015-06-26 10:52 - 2015-06-27 02:10 - 00000000 ____D C:\Users\David\AppData\Roaming\360safe
2015-06-26 10:52 - 2015-06-26 11:06 - 00000000 ____D C:\ProgramData\360TotalSecurity
2015-06-26 10:52 - 2015-06-26 10:52 - 00001180 _____ C:\Users\Public\Desktop\360 Total Security.lnk
2015-06-26 10:52 - 2015-06-26 10:52 - 00000000 _RSHD C:\360SANDBOX
2015-06-26 10:52 - 2015-06-26 10:52 - 00000000 ____D C:\WINDOWS\Tasks\360Disabled
2015-06-26 10:52 - 2015-06-26 10:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
2015-06-26 10:52 - 2015-06-26 10:52 - 00000000 ____D C:\ProgramData\360safe
2015-06-26 10:52 - 2015-05-18 19:20 - 00314448 _____ (Qihu 360 Software Co., Ltd.) C:\WINDOWS\system32\Drivers\360fsflt.sys
2015-06-26 10:52 - 2015-05-18 19:20 - 00305736 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Box64.sys
2015-06-26 10:52 - 2015-05-18 19:20 - 00180816 _____ (Qihu 360 Software Co., Ltd.) C:\WINDOWS\system32\Drivers\BAPIDRV64.SYS
2015-06-26 10:52 - 2015-05-18 19:20 - 00100424 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AntiHacker64.sys
2015-06-26 10:52 - 2015-05-18 19:20 - 00077896 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AvFlt.sys
2015-06-26 10:52 - 2015-05-18 19:20 - 00040520 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Camera64.sys
2015-06-26 10:50 - 2015-06-26 10:50 - 36034168 _____ C:\Users\David\Downloads\360TS_Setup.exe
2015-06-26 10:50 - 2015-06-26 10:50 - 00000000 ____D C:\Program Files (x86)\360
2015-06-26 10:49 - 2015-06-26 10:49 - 01332344 _____ (QIHU 360 SOFTWARE CO. LIMITED) C:\Users\David\Downloads\360TS_Setup_Mini.exe
2015-06-26 10:44 - 2015-06-26 10:44 - 23671592 _____ (Riot Games) C:\Users\David\Downloads\LeagueofLegends_KR_Installer.exe
2015-06-26 10:24 - 2015-06-27 02:08 - 00000000 ____D C:\Users\David\AppData\Roaming\Skype
2015-06-26 10:24 - 2015-06-26 10:24 - 00000000 ____D C:\Users\David\AppData\Local\Skype
2015-06-26 10:23 - 2015-06-26 10:24 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-06-26 10:23 - 2015-06-26 10:24 - 00000000 ____D C:\ProgramData\Skype
2015-06-26 10:23 - 2015-06-26 10:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-06-26 10:23 - 2015-06-26 10:23 - 00002713 _____ C:\Users\Public\Desktop\Skype.lnk
2015-06-26 10:22 - 2015-06-26 10:22 - 01384064 _____ (Skype Technologies S.A.) C:\Users\David\Downloads\SkypeSetup.exe
2015-06-26 10:12 - 2015-06-26 10:12 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\KakaoTalk.lnk
2015-06-26 10:12 - 2015-06-26 10:12 - 00001156 _____ C:\Users\Public\Desktop\KakaoTalk.lnk
2015-06-26 10:12 - 2015-06-26 10:12 - 00000000 ____D C:\Users\David\AppData\Local\Kakao
2015-06-26 10:12 - 2015-06-26 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KakaoTalk
2015-06-26 10:11 - 2015-06-26 10:11 - 25602960 _____ (Daum Kakao Corp.) C:\Users\David\Downloads\KakaoTalk_Setup.exe
2015-06-26 10:11 - 2015-06-26 10:11 - 00000000 ____D C:\Program Files (x86)\Kakao
2015-06-26 10:00 - 2015-06-27 01:04 - 00000000 ____D C:\Users\David\AppData\Local\Spotify
2015-06-26 10:00 - 2015-06-26 22:30 - 00000000 ____D C:\Users\David\AppData\Roaming\Spotify
2015-06-26 10:00 - 2015-06-26 10:00 - 00155296 _____ (Spotify Ltd) C:\Users\David\Downloads\SpotifySetup.exe
2015-06-26 10:00 - 2015-06-26 10:00 - 00001824 _____ C:\Users\David\Desktop\Spotify.lnk
2015-06-26 10:00 - 2015-06-26 10:00 - 00001810 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-06-26 09:50 - 2015-06-27 02:00 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-26 09:50 - 2015-06-27 02:00 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-26 09:50 - 2015-06-26 11:08 - 00003896 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-26 09:50 - 2015-06-26 11:08 - 00003660 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-06-26 09:50 - 2015-06-26 09:50 - 00002264 _____ C:\Users\Public\Desktop\Chrome.lnk
2015-06-26 09:50 - 2015-06-26 09:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chrome
2015-06-26 09:50 - 2015-06-26 09:50 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-26 09:49 - 2015-06-26 09:50 - 00000000 ____D C:\Users\David\AppData\Local\Google
2015-06-26 09:49 - 2015-06-26 09:49 - 00000000 ____D C:\Users\David\AppData\Roaming\LolClient
2015-06-26 09:49 - 2015-06-26 09:49 - 00000000 ____D C:\Users\David\AppData\Local\Deployment
2015-06-26 09:49 - 2015-06-26 09:49 - 00000000 ____D C:\Users\David\AppData\Local\Apps\2.0
2015-06-26 09:47 - 2015-06-26 18:13 - 00000000 ____D C:\Users\David\AppData\Roaming\LSD2BBA8D2
2015-06-26 09:47 - 2015-06-26 09:47 - 00000000 ____D C:\Users\David\AppData\Roaming\RIOTGames
2015-06-26 09:47 - 2015-06-26 09:47 - 00000000 ____D C:\ProgramData\Riot Games
2015-06-26 09:41 - 2015-06-27 02:04 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3209958707-3427003406-1755347824-1001
2015-06-26 09:41 - 2015-06-26 09:41 - 00000000 ____D C:\Users\David\AppData\Roaming\Macromedia
2015-06-26 09:38 - 2015-06-26 11:12 - 00001283 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-FiHotspotChgToast.lnk
2015-06-26 09:38 - 2015-06-26 09:38 - 00000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-06-26 09:37 - 2015-06-26 09:37 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2015-06-26 09:35 - 2015-06-26 09:35 - 00001457 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-26 09:35 - 2015-06-26 09:35 - 00000000 ____D C:\Users\David\AppData\Roaming\Adobe
2015-06-26 09:35 - 2015-06-26 09:35 - 00000000 ____D C:\Users\David\AppData\Local\VirtualStore
2015-06-26 09:35 - 2015-06-26 09:35 - 00000000 ____D C:\Users\David\AppData\Local\NVIDIA Corporation
2015-06-26 09:34 - 2015-06-26 09:34 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-06-26 09:34 - 2015-06-26 09:34 - 00000000 ____D C:\Users\David\AppData\Local\NVIDIA
2015-06-26 09:34 - 2015-06-26 09:34 - 00000000 ____D C:\ProgramData\eBay
2015-06-26 09:33 - 2015-06-26 09:33 - 00000020 ___SH C:\Users\David\ntuser.ini
2015-06-26 09:33 - 2015-06-26 09:33 - 00000000 ____D C:\Users\David\AppData\Roaming\Intel
2015-06-26 09:31 - 2015-06-26 09:31 - 00010472 _____ C:\Users\David 2\AppData\Local\Application.xml
2015-06-26 09:31 - 2015-06-26 09:31 - 00010393 _____ C:\Users\Administrator\AppData\Local\Application.xml
2015-06-26 09:29 - 2015-06-26 09:36 - 00000000 ____D C:\Users\David
2015-06-26 09:29 - 2014-03-18 19:05 - 00000000 ___RD C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-26 09:29 - 2014-03-18 19:05 - 00000000 ___RD C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-26 09:29 - 2014-03-18 18:55 - 00000369 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-06-26 09:29 - 2014-03-18 18:55 - 00000369 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-06-26 09:29 - 2013-08-23 00:36 - 00000000 ___RD C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-26 09:29 - 2013-08-23 00:36 - 00000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-26 09:28 - 2015-06-26 09:30 - 00000000 ____D C:\Users\David 2
2015-06-26 09:28 - 2014-03-18 19:05 - 00000000 ___RD C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-26 09:28 - 2014-03-18 19:05 - 00000000 ___RD C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-26 09:28 - 2014-03-18 18:55 - 00000369 _____ C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-06-26 09:28 - 2014-03-18 18:55 - 00000369 _____ C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-06-26 09:28 - 2013-08-23 00:36 - 00000000 ___RD C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-26 09:28 - 2013-08-23 00:36 - 00000000 ____D C:\Users\David 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-26 09:28 - 2013-02-04 15:18 - 00000189 _____ C:\Users\David 2\Desktop\Lenovo Telephony Start Now.url
2015-06-26 09:27 - 2015-06-26 09:31 - 00030483 _____ C:\WINDOWS\diagwrn.xml
2015-06-26 09:27 - 2015-06-26 09:31 - 00030483 _____ C:\WINDOWS\diagerr.xml
2015-06-26 08:49 - 2015-06-26 10:36 - 00000000 ___HD C:\$SysReset
2015-06-26 08:20 - 2015-06-26 08:33 - 00000000 ____D C:\Users\David\Desktop\cports
2015-06-26 07:07 - 2015-06-26 07:07 - 04817297 _____ (Igor Pavlov) C:\Users\David\Desktop\9ecn37ww.exe
2015-06-25 22:08 - 2015-06-25 22:08 - 00000000 ____D C:\Users\David\Desktop\Leatrix_Latency_Fix_3.03
2015-06-25 21:37 - 2015-06-25 21:37 - 01918512 _____ (Mister Group ) C:\Users\David\Downloads\SystemExplorerSetup_642.exe
2015-06-23 00:06 - 2015-06-23 00:36 - 00000000 ____D C:\Users\David\Downloads\Game.Of.Thrones.S05.Season.5.COMPLETE.1080p.HDTV.x264.anoXmous
2015-06-23 00:04 - 2015-06-23 00:05 - 00000000 ____D C:\Users\David\Downloads\Game.of.Thrones.S01.720p.BluRay.x264.ShAaNiG
2015-06-22 03:35 - 2015-06-22 03:35 - 00000000 ____D C:\NVIDIA
2015-06-22 02:57 - 2015-06-22 02:57 - 00000000 ____D C:\Users\David\Downloads\Game Of Thrones - Season 1 - ENG Subs
2015-06-20 23:01 - 2015-06-20 23:01 - 00158684 _____ C:\Users\David\Documents\cc_20150620_230135.reg
2015-06-08 18:25 - 2015-06-09 15:50 - 00000000 ____D C:\Users\David\Documents\The Witcher 3
2015-06-08 17:50 - 2015-06-08 18:20 - 00000000 ____D C:\GOG Games
2015-06-03 15:21 - 2015-06-03 15:21 - 00000957 _____ C:\Users\David\Desktop\lel.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-27 02:24 - 2013-08-23 00:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-06-27 02:23 - 2014-07-06 08:36 - 00676824 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-27 02:23 - 2013-08-23 00:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-27 02:10 - 2013-08-23 00:36 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2015-06-27 02:04 - 2014-03-18 18:53 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-27 02:02 - 2014-07-06 09:21 - 00002560 _____ C:\WINDOWS\system32\VfService.trf
2015-06-27 02:00 - 2013-08-23 00:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-27 01:59 - 2013-08-22 23:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-27 01:53 - 2014-03-18 18:44 - 00007444 _____ C:\WINDOWS\PFRO.log
2015-06-27 01:52 - 2013-08-22 22:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-06-26 17:37 - 2014-07-06 09:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-26 11:12 - 2014-07-06 09:34 - 00000000 ____D C:\ProgramData\LU
2015-06-26 11:08 - 2014-07-06 09:27 - 00003056 _____ C:\WINDOWS\System32\Tasks\PDVDServ Task
2015-06-26 11:07 - 2014-07-06 08:45 - 00003936 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2015-06-26 11:07 - 2014-07-06 08:45 - 00003690 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon
2015-06-26 11:02 - 2014-07-06 09:22 - 00000000 ____D C:\ProgramData\McAfee
2015-06-26 11:02 - 2014-07-06 09:22 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-06-26 11:00 - 2013-08-22 23:44 - 00344408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-26 10:19 - 2013-08-23 00:36 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-06-26 10:17 - 2013-08-22 22:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-06-26 09:53 - 2013-08-23 00:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-26 09:47 - 2014-07-06 09:30 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-06-26 09:37 - 2013-08-23 00:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-26 09:35 - 2014-09-11 08:51 - 00000000 ____D C:\Users\David\AppData\Local\Packages
2015-06-26 09:35 - 2014-07-06 09:30 - 00113477 _____ C:\WINDOWS\modules.log
2015-06-26 09:35 - 2014-04-04 04:15 - 00000000 ___DC C:\WINDOWS\Panther
2015-06-26 09:32 - 2014-12-04 00:17 - 00000000 ____D C:\Users\David\Desktop\Games
2015-06-26 09:32 - 2014-09-23 09:12 - 00000000 ____D C:\Users\David\Desktop\Shortcuts
2015-06-26 09:32 - 2014-09-19 11:35 - 00000000 ____D C:\Users\David\Desktop\Game Files
2015-06-26 09:31 - 2014-07-06 09:26 - 00000000 ____D C:\Users\Public\Documents\Open Labs Library
2015-06-26 09:31 - 2013-08-23 00:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-06-26 09:31 - 2013-08-22 23:46 - 00034120 _____ C:\WINDOWS\setupact.log
2015-06-26 09:30 - 2015-04-05 21:54 - 00000000 ____D C:\Users\David 2\AppData\Local\Packages
2015-06-26 09:26 - 2013-08-22 22:36 - 00000000 ___HD C:\Users\Default
2015-06-26 08:16 - 2014-09-13 12:54 - 00000000 ____D C:\Users\David\Documents\StarCraft II
2015-06-25 18:42 - 2014-12-06 20:10 - 00000000 ____D C:\Users\David\Desktop\Music Projects
2015-06-24 01:01 - 2014-09-15 17:37 - 00000000 ____D C:\Users\David\Documents\My Games
2015-06-23 18:26 - 2015-02-21 06:02 - 00000000 ____D C:\Users\David\Desktop\New folder
2015-06-20 00:32 - 2014-09-26 18:21 - 00004747 _____ C:\WirelessDiagLog.csv
2015-06-08 18:25 - 2014-09-19 11:29 - 00000000 ____D C:\Users\David\Desktop\School
2015-06-03 15:20 - 2015-05-16 04:24 - 00000000 ____D C:\Users\David\Desktop\screenshots
2015-06-03 15:20 - 2015-04-10 23:42 - 00000000 ____D C:\Users\David\Desktop\arena

==================== Files in the root of some directories =======

2015-06-26 17:39 - 2015-06-27 02:04 - 0007599 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2014-07-06 08:59 - 2014-07-06 08:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\David\AppData\Local\Temp\Quarantine.exe
C:\Users\David\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-06 08:31

==================== End of log ============================