========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google
riginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google
mniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google
ageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage:
http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: AhnLab Online Security (Enabled) = C:\Program Files (x86)\AhnLab\ASP\Components\aosmgr\npaosmgr.dll
CHR - plugin: gomtvx NIE Module (Enabled) = C:\Program Files (x86)\Common Files\GRETECH\npgomtvx_nie.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: INICIS INIpay Plugin (Enabled) = C:\Program Files (x86)\INICIS61\plugins\npINIwallet61.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: NPI3GManager (c) Interezen. plugin (Enabled) = C:\Program Files (x86)\Interezen\Plugins\NPI3GManager.dll
CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll
CHR - plugin: Softforum XecureWeb Unified Plug-in (Enabled) = C:\Program Files (x86)\Softforum\XecureWeb\NPPlugin\dll\npXecureMacuxNPPlugin.dll
CHR - plugin: Veraport Mozilla Plugin (Enabled) = C:\Program Files (x86)\Wizvera\Veraport20\npveraport20.dll
CHR - plugin: RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
CHR - plugin: RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
CHR - plugin: RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
CHR - plugin: RealDownloader Plugin (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: TouchEn Key for Multi-Browser (Enabled) = C:\Windows\system32\npKeyPro.dll
CHR - Extension: Google \uBB38\uC11C\uB3C4\uAD6C = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google \uB4DC\uB77C\uC774\uBE0C = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: WOT = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.13_0\
CHR - Extension: WOT = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\2.0.17_0\
CHR - Extension: WOT = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\2.0.18_0\
CHR - Extension: WOT = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\2.1.1_0\
CHR - Extension: YouTube = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google \uAC80\uC0C9 = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Screen Capture (by Google) = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpngackimfmofbokmjmljamhdncknpmg\5.0.6_0\
CHR - Extension: Qualys BrowserCheck for Windows = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejhnkognlohdkpjkjongioociddgoibk\1.8.51.1_0\
CHR - Extension: Kiwi IRC = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\malkpgopfalejggcogglkiemcknbiphe\0.5.4_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Gmail = C:\Users\FamilyCom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013-10-14 11:10:15 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:
64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:
64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (COMODO)
O4:
64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:
64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" File not found
O4 - HKLM..\Run: [HncUpdate] C:\Program Files (x86)\Common Files\Hnc\HncUtils\HncChecker.exe (Hancom Inc(HNC).)
O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe ()
O4 - HKLM..\Run: [RemoteControl8] C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [tvncontrol] C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.)
O4 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1002..\Run: [OMPService] C:\Program Files (x86)\T store PCManager\bin\rmfsvc.exe (SK Telecom)
O4 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1002..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1002..\Run: [VirtualDVD] C:\Program Files (x86)\VirtualDVD\VirtualDVD.exe (oh!soft)
O4 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1002\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-3543073300-3519423333-1202189545-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16:
64bit: - DPF: {6CE20149-ABE3-462E-A1B4-5B549971AA38} Reg Error: Key error. (Reg Error: Key error.)
O16 - DPF: {054BF5DC-6052-4235-9DB4-7CCDC28CF8B4}
https://nxpartners.okcashbag.com/itrs/meps/ITRSClient.cab (RSA Class)
O16 - DPF: {1219B6C3-CD4D-4243-9A4F-4C9F12FCC6E7}
http://ck.softforum.co.kr/CKKeyPro/yessign/CKKeyProInst.cab (CK_KeyPro_Inst)
O16 - DPF: {139838ED-ED85-4A61-8025-99E48E664265}
https://plugin.inicis.com/banktown/wallet/plugin/ActiveX_E2E.cab (ActiveX_E2E Control)
O16 - DPF: {1C3DB737-3814-495E-87D5-62968A2A1761}
http://activex.off.co.kr/toolbar/DicoStarterX.cab (DicoStarter Control)
O16 - DPF: {20BBA18F-5BC8-47B5-8FC9-5DFCA8E56A4B}
http://mpi.dacom.net/XMPI/js/LGUplus_XMPI_20110503.cab (XacsPop Control)
O16 - DPF: {24F6E6A8-852C-45A8-ADD3-C4AB0D6FD231}
https://plugin.inicis.com/wallet61/INIwallet61_vista.cab (INIwallet61 Control)
O16 - DPF: {39461460-2552-4D51-A062-3AB6A7B902E9}
http://img.shinhan.com/shttp/install/72012/down/INIS70.cab (INISAFE Updater Control)
O16 - DPF: {39FC0CF9-86F3-4502-B773-D16706EDEC83}
http://banking.nonghyup.com/plugin/scsk/403196/SCSK4_WOW64.cab (SCSK Control)
O16 - DPF: {48ECCD73-123C-4C25-A64C-76E8E8A30CAF}
http://mpi.dacom.net/XPayMPI/XPayMPI.cab (XPayMPIOCX Control)
O16 - DPF: {6CE20149-ABE3-462E-A1B4-5B549971AA38} C:\Users\FAMILY~1\AppData\Local\Temp\5002543\TouchEnKey_Installer_x86.exe (XecureCKKB Class)
O16 - DPF: {7477D0E6-882E-44CD-965E-E1FD71F303A8}
http://www.narasarang.or.kr/web/user/scm/usersmartcard/NaraActiveX.cab (NaraActiveX Control)
O16 - DPF: {7E9FDB80-5316-11D4-B02C-00C04F0CD404}
http://www.hrd.go.kr/XecureObject/xw_install.cab (XecureWeb 4.0 Client Control)
O16 - DPF: {9BF4F796-4625-4E8E-B1D2-43FD110130C1}
http://www.narasarang.or.kr/web/ext/ocx/JXCealG2.v3.cab (Jxceal40s2 Control)
O16 - DPF: {A349609D-1864-443A-AD48-EE577A17264A}
http://121.125.78.197/AIViewer50/AIIntegratedGen.cab (AIIntegratedGenCtrl Class)
O16 - DPF: {A4508A45-F1C4-40F3-99B4-0CA08AC77E3B}
https://nice.checkplus.co.kr/common/js/key_protect/kdfense8.cab (Kdfense8 Control)
O16 - DPF: {B0A75875-3622-48BA-B5FF-45AD77AC2D0E}
https://www.bankpay.or.kr/BankPayEFT.cab (BankPayEFTCtrl Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E5A02FD2-A8EF-4E5B-80C1-CB386F95E049}
https://plugin.inicis.com/banktown/wallet/plugin/BtPmntClient.cab (BtPmntClient Class)
O16 - DPF: {E78928A6-3D2A-4BF7-A100-F3FBAA351B49}
https://www.vpay.co.kr/kvpfiles_new/KVPISPCTLD_VISTA64.cab (KvpIspCtlD Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 168.126.63.1 168.126.63.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A127E362-2855-4737-A15D-DABB58F73491}: DhcpNameServer = 168.126.63.1 168.126.63.2
O20:
64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-09-11 10:43:12 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2002-02-23 02:35:36 | 000,000,043 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013-10-14 12:09:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\FamilyCom\Desktop\OTL.exe
[2013-10-14 11:46:39 | 001,032,220 | ---- | C] (Thisisu) -- C:\Users\FamilyCom\Desktop\JRT.exe
[2013-10-14 11:44:25 | 000,000,000 | R--D | C] -- C:\Users\FamilyCom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
[2013-10-14 11:32:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\COMODO
[2013-10-14 11:14:49 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013-10-14 11:10:22 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013-10-14 10:53:04 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013-10-14 10:46:13 | 001,898,112 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\FamilyCom\Desktop\rkill.exe
[2013-10-14 10:45:45 | 005,132,614 | R--- | C] (Swearware) -- C:\Users\FamilyCom\Desktop\your_name.exe
[2013-10-14 10:10:03 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013-10-14 10:10:03 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013-10-14 10:10:03 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013-10-14 10:09:44 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013-10-13 23:12:19 | 000,116,440 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2013-10-13 23:08:04 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\Desktop\mbar
[2013-10-13 22:56:55 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\Desktop\RK_Quarantine
[2013-10-13 16:57:50 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\FamilyCom\Desktop\dds.com
[2013-10-11 20:48:13 | 000,150,512 | R--- | C] (Lumensoft Co., Ltd.) -- C:\Windows\SysNative\CKAgent.exe
[2013-10-11 20:48:12 | 000,150,512 | R--- | C] (Lumensoft Co., Ltd.) -- C:\Windows\SysWow64\CKAgent.exe
[2013-10-09 19:06:34 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\Documents\TES5Edit_3_0_31_EXPERIMENTAL-25859-3-0-31EXP
[2013-10-04 09:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013-10-04 09:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013-10-04 09:31:48 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013-10-04 09:31:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2013-10-04 09:31:48 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013-10-03 15:24:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2013-10-03 12:12:27 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013-10-02 13:17:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2013-10-02 13:15:38 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2013-09-30 17:20:42 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\AppData\Roaming\HpUpdate
[2013-09-30 17:20:03 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard
[2013-09-28 15:21:48 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\Documents\maya
[2013-09-28 15:21:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autodesk
[2013-09-28 15:20:54 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\AppData\Local\backburner
[2013-09-26 14:49:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2013-09-26 14:48:57 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013-09-26 14:48:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2013-09-26 14:48:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013-09-25 15:39:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013-09-24 20:52:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2013-09-24 20:51:41 | 000,000,000 | -H-D | C] -- C:\Users\FamilyCom\AppData\Roaming\Origin
[2013-09-24 20:45:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GRID 2
[2013-09-20 23:01:50 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\Desktop\Club Box Download
[2013-09-20 22:58:12 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\클럽박스
[2013-09-20 22:57:28 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\AppData\Local\Zettamedia
[2013-09-20 21:31:14 | 000,000,000 | ---D | C] -- C:\Users\FamilyCom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wrye Bash
[2013-09-20 21:31:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wrye Bash
[2013-09-19 18:16:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013-09-19 18:16:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013-09-19 18:16:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013-10-14 12:09:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\FamilyCom\Desktop\OTL.exe
[2013-10-14 11:46:43 | 001,032,220 | ---- | M] (Thisisu) -- C:\Users\FamilyCom\Desktop\JRT.exe
[2013-10-14 11:44:29 | 000,000,686 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-10-14 11:44:28 | 000,034,752 | ---- | M] () -- C:\Windows\SysNative\drivers\WPRO_41_2001.sys
[2013-10-14 11:43:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-10-14 11:43:12 | 2117,218,303 | -HS- | M] () -- C:\hiberfil.sys
[2013-10-14 11:42:41 | 000,025,936 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-10-14 11:42:41 | 000,025,936 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-10-14 11:41:00 | 000,000,690 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-10-14 11:35:38 | 001,048,960 | ---- | M] () -- C:\Users\FamilyCom\Desktop\adwcleaner.exe
[2013-10-14 11:32:22 | 000,002,043 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
[2013-10-14 11:32:22 | 000,002,043 | ---- | M] () -- C:\Users\Public\Desktop\GeekBuddy.lnk
[2013-10-14 11:10:15 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013-10-14 10:46:16 | 001,898,112 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\FamilyCom\Desktop\rkill.exe
[2013-10-14 10:45:51 | 005,132,614 | R--- | M] (Swearware) -- C:\Users\FamilyCom\Desktop\your_name.exe
[2013-10-14 10:44:00 | 000,000,622 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-10-14 07:17:04 | 000,116,440 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2013-10-14 07:16:22 | 000,091,352 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2013-10-13 22:53:30 | 003,985,920 | ---- | M] () -- C:\Users\FamilyCom\Desktop\RogueKillerX64.exe
[2013-10-13 22:18:13 | 000,001,456 | ---- | M] () -- C:\Users\FamilyCom\AppData\Local\Adobe Save for Web 12.0 Prefs
[2013-10-13 22:03:48 | 003,708,808 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-10-13 22:03:48 | 000,714,326 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2013-10-13 22:03:48 | 000,652,150 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-10-13 22:03:48 | 000,427,142 | ---- | M] () -- C:\Windows\SysNative\perfh012.dat
[2013-10-13 22:03:48 | 000,407,584 | ---- | M] () -- C:\Windows\SysNative\perfh011.dat
[2013-10-13 22:03:48 | 000,392,010 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2013-10-13 22:03:48 | 000,374,908 | ---- | M] () -- C:\Windows\SysNative\prfh0804.dat
[2013-10-13 22:03:48 | 000,149,368 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2013-10-13 22:03:48 | 000,121,082 | ---- | M] () -- C:\Windows\SysNative\perfc011.dat
[2013-10-13 22:03:48 | 000,121,082 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-10-13 22:03:48 | 000,119,404 | ---- | M] () -- C:\Windows\SysNative\perfc012.dat
[2013-10-13 22:03:48 | 000,118,942 | ---- | M] () -- C:\Windows\SysNative\prfc0804.dat
[2013-10-13 22:03:48 | 000,114,028 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2013-10-13 22:01:00 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts_tmp
[2013-10-13 16:57:55 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\FamilyCom\Desktop\dds.com
[2013-10-11 20:48:13 | 000,150,512 | R--- | M] (Lumensoft Co., Ltd.) -- C:\Windows\SysNative\CKAgent.exe
[2013-10-11 20:48:13 | 000,141,848 | ---- | M] (Kings Information & Network) -- C:\Windows\SysNative\kcrtx64.sys
[2013-10-11 20:48:13 | 000,019,888 | ---- | M] (lumensoft Corporation) -- C:\Windows\SysNative\JRSUKD25.SYS
[2013-10-11 20:48:12 | 000,150,512 | R--- | M] (Lumensoft Co., Ltd.) -- C:\Windows\SysWow64\CKAgent.exe
[2013-10-11 18:53:22 | 000,000,600 | ---- | M] () -- C:\Users\FamilyCom\PUTTY.RND
[2013-10-09 14:41:39 | 005,293,088 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013-10-09 12:57:55 | 003,664,740 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-10-07 13:11:08 | 004,483,480 | ---- | M] () -- C:\Windows\SysWow64\ISPPopUpDlg.exe
[2013-10-04 09:35:25 | 000,002,283 | ---- | M] () -- C:\Users\FamilyCom\Application Data\Microsoft\Internet Explorer\Quick Launch\Chrome.lnk
[2013-10-04 09:32:15 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013-09-29 14:52:20 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013-09-28 15:20:01 | 000,001,816 | ---- | M] () -- C:\Users\FamilyCom\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Maya 2013 64-bit.lnk
[2013-09-28 15:20:01 | 000,001,792 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Maya 2013 64-bit.lnk
[2013-09-26 19:35:00 | 003,098,352 | ---- | M] (AhnLab, Inc.) -- C:\Windows\SysNative\btscan.exe
[2013-09-25 11:06:48 | 000,003,244 | ---- | M] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2013-09-24 19:54:10 | 000,023,168 | ---- | M] (COMODO) -- C:\Windows\SysNative\drivers\cmderd.sys
[2013-09-24 19:53:52 | 000,043,216 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdcsr.dll
[2013-09-24 19:53:51 | 000,354,240 | ---- | M] (COMODO) -- C:\Windows\SysWow64\guard32.dll
[2013-09-24 19:53:50 | 000,444,392 | ---- | M] (COMODO) -- C:\Windows\SysNative\guard64.dll
[2013-09-24 19:53:40 | 000,347,864 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdvrt64.dll
[2013-09-24 19:53:39 | 000,045,784 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdkbd64.dll
[2013-09-24 19:53:35 | 000,280,792 | ---- | M] (COMODO) -- C:\Windows\SysWow64\cmdvrt32.dll
[2013-09-24 19:53:34 | 000,040,664 | ---- | M] (COMODO) -- C:\Windows\SysWow64\cmdkbd32.dll
[2013-09-20 22:58:21 | 000,000,209 | ---- | M] () -- C:\Users\FamilyCom\Desktop\클럽박스.url
[2013-09-20 20:45:21 | 000,001,035 | ---- | M] () -- C:\Users\FamilyCom\Desktop\VirtualDVD.lnk
[2013-09-17 17:53:10 | 000,002,411 | ---- | M] () -- C:\Windows\SysWow64\lgAxconfig.ini
[2013-09-17 17:53:07 | 000,000,831 | ---- | M] () -- C:\Users\FamilyCom\Desktop\LGMobile Support Tool.lnk
[2013-09-17 17:22:50 | 000,001,110 | ---- | M] () -- C:\Users\Public\Desktop\LG PC Suite.Lnk
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013-10-14 11:35:30 | 001,048,960 | ---- | C] () -- C:\Users\FamilyCom\Desktop\adwcleaner.exe
[2013-10-14 10:10:03 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013-10-14 10:10:03 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013-10-14 10:10:03 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013-10-14 10:10:03 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013-10-14 10:10:03 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013-10-13 22:53:26 | 003,985,920 | ---- | C] () -- C:\Users\FamilyCom\Desktop\RogueKillerX64.exe
[2013-10-07 13:11:08 | 004,483,480 | ---- | C] () -- C:\Windows\SysWow64\ISPPopUpDlg.exe
[2013-09-28 15:20:01 | 000,001,816 | ---- | C] () -- C:\Users\FamilyCom\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Maya 2013 64-bit.lnk
[2013-09-28 15:20:01 | 000,001,792 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Maya 2013 64-bit.lnk
[2013-09-26 14:49:31 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013-09-21 19:16:09 | 000,002,043 | ---- | C] () -- C:\Users\Public\Desktop\GeekBuddy.lnk
[2013-09-20 22:58:21 | 000,000,209 | ---- | C] () -- C:\Users\FamilyCom\Desktop\클럽박스.url
[2013-09-10 21:04:08 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\scskConfigEH.ini
[2013-09-06 20:55:12 | 000,216,064 | ---- | C] () -- C:\Windows\SysWow64\gcapi_dll.dll
[2013-07-29 17:00:53 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2013-07-29 17:00:53 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2013-07-29 17:00:53 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2013-07-29 17:00:51 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013-07-29 11:52:18 | 003,664,740 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-07-29 08:46:02 | 000,000,600 | ---- | C] () -- C:\Users\FamilyCom\PUTTY.RND
[2013-07-25 16:15:07 | 000,226,010 | ---- | C] () -- C:\Windows\hpoins19.dat
[2013-07-25 16:15:07 | 000,013,898 | ---- | C] () -- C:\Windows\hpomdl19.dat
[2013-07-19 20:41:39 | 000,573,440 | ---- | C] () -- C:\Windows\SysWow64\chartui_xnp.dll
[2013-07-19 20:41:39 | 000,000,817 | ---- | C] () -- C:\Windows\rdviewer50.ini
[2013-04-30 19:39:00 | 000,001,456 | ---- | C] () -- C:\Users\FamilyCom\AppData\Local\Adobe Save for Web 12.0 Prefs
[2013-04-30 08:15:06 | 000,025,872 | ---- | C] () -- C:\Windows\SysWow64\INIUAC.exe
[2013-04-16 21:19:44 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\pythoncom27.dll
[2013-04-16 21:19:44 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\pywintypes27.dll
[2013-04-16 21:19:44 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\pythoncomloader27.dll
[2013-04-10 20:25:17 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll
[2013-04-10 20:25:17 | 000,002,411 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini
[2013-04-07 14:50:02 | 000,072,272 | ---- | C] () -- C:\Windows\SysWow64\cosa.dll
[2013-04-07 14:50:02 | 000,015,512 | ---- | C] () -- C:\Windows\SysWow64\IRTrace.dll
[2013-04-06 17:22:49 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013-04-05 15:15:50 | 000,000,069 | ---- | C] () -- C:\Windows\hjimesv.ini
[2013-04-05 15:15:49 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\winhcfgb.ini
[2013-04-05 15:14:45 | 000,667,136 | ---- | C] () -- C:\Windows\SysWow64\OGACheckControl.dll
[2013-04-05 14:11:23 | 000,405,881 | ---- | C] () -- C:\Windows\KJ.exe
[2013-02-24 01:01:53 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\winhcfga.ini
[2013-01-16 15:45:26 | 000,708,096 | ---- | C] () -- C:\Windows\SysWow64\INIcrypto20.dll
[2013-01-16 15:45:26 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\ISP_crgen.dll
[2013-01-16 15:45:24 | 000,495,616 | ---- | C] () -- C:\Windows\SysWow64\KvpUpCom.dll
[2013-01-16 15:45:24 | 000,045,116 | ---- | C] () -- C:\Windows\SysWow64\KvpSetRegistry.exe
[2013-01-16 15:45:24 | 000,020,480 | ---- | C] () -- C:\Windows\SysWow64\KVPSetupEx.exe
[2012-08-29 16:54:56 | 000,024,576 | ---- | C] () -- C:\Windows\INIUpdateAdmin.dll
[2011-12-08 16:14:58 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
========== ZeroAccess Check ==========
[2009-07-14 13:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 11:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 10:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 10:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 12:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 10:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013-04-07 14:50:39 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\AhnLab
[2013-09-28 15:33:37 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\Autodesk
[2013-07-13 17:13:20 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\BitComet
[2013-07-13 17:06:57 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\BitTorrent
[2013-04-12 16:34:19 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\DAEMON Tools Lite
[2013-04-20 14:43:27 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\Foxit Software
[2013-09-01 22:25:30 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\HNC
[2013-04-16 19:21:16 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\LG Electronics
[2013-07-13 17:06:36 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\NHN
[2013-09-24 20:51:42 | 000,000,000 | -H-D | M] -- C:\Users\FamilyCom\AppData\Roaming\Origin
[2013-04-20 08:44:09 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\qualys
[2013-10-14 11:47:10 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\uTorrent
[2013-04-12 16:46:06 | 000,000,000 | ---D | M] -- C:\Users\FamilyCom\AppData\Roaming\VirtualDVD
========== Purity Check ==========
< End of report >
