Wow it worked.
OTL.txt
OTL logfile created on: 9/15/2013 6:32:11 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Anosh\Documents\Downloads\Programs
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.16 Gb Total Physical Memory | 2.35 Gb Available Physical Memory | 74.36% Memory free
6.32 Gb Paging File | 5.45 Gb Available in Paging File | 86.18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97.56 Gb Total Space | 76.42 Gb Free Space | 78.34% Space Free | Partition Type: NTFS
Drive D: | 97.66 Gb Total Space | 91.80 Gb Free Space | 94.01% Space Free | Partition Type: NTFS
Drive E: | 102.78 Gb Total Space | 94.98 Gb Free Space | 92.42% Space Free | Partition Type: NTFS
Computer Name: ANOSH-PC | User Name: Anosh | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/09/15 18:31:25 | 000,620,032 | ---- | M] (OldTimer Tools) -- C:\Users\Anosh\My Documents\Downloads\Programs\OTL.exe
PRC - [2013/08/30 14:10:59 | 003,118,512 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/12/06 12:14:42 | 000,056,416 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe
PRC - [2012/08/09 03:35:50 | 001,454,172 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2012/08/09 03:35:50 | 000,303,186 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\stacsv.exe
PRC - [2010/11/21 01:59:20 | 002,633,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/21 01:59:19 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/21 01:59:10 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2010/11/21 01:59:07 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2009/03/03 02:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Program Files\IDT\WDM\AEstSrv.exe
PRC - [2008/02/18 17:31:01 | 000,251,312 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
========== Modules (No Company Name) ==========
MOD - [2013/04/21 21:44:32 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/04/21 21:44:04 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012/11/15 02:03:52 | 000,094,208 | ---- | M] () -- C:\Windows\System32\IccLibDll.dll
========== Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- C:\Program Files\Hotspot Shield\bin\hsswd.exe -- (HssWd)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Hotspot Shield\bin\cmw_srv.exe -- (hshld)
SRV - [2013/07/25 08:52:52 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/11/15 06:42:16 | 000,277,048 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/08/09 03:35:50 | 000,303,186 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv.exe -- (STacSV)
SRV - [2009/07/14 05:46:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 05:46:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 05:45:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/03/03 02:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AEstSrv.exe -- (AESTFilters)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - [2013/08/13 03:39:42 | 000,037,064 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\taphss6.sys -- (taphss6)
DRV - [2013/08/13 03:36:06 | 000,041,160 | ---- | M] (AnchorFree Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\hssdrv6.sys -- (HssDRV6)
DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/09/10 10:41:06 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netaapl.sys -- (Netaapl)
DRV - [2012/08/09 03:35:50 | 000,450,560 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2012/08/01 22:43:40 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV - [2012/06/19 22:39:10 | 000,289,792 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud)
DRV - [2011/12/05 22:44:24 | 009,067,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011/12/05 21:11:52 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011/03/25 18:12:06 | 010,542,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\igdpmd32.sys -- (intelkmd)
DRV - [2010/11/21 01:59:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/21 01:59:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/21 01:59:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/21 01:59:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/21 01:59:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/21 01:59:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/21 01:59:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/21 01:59:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/21 01:59:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/21 01:59:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/21 01:59:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/21 01:59:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/21 01:59:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/01/29 11:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2009/07/14 04:15:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =
https://www.google.com.af/ [binary data]
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 04 98 AE 1F 02 A8 CE 01 [binary data]
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems:
mozilla_cc@internetdownloadmanager.com:6.7
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5b99\extensions\\Components: C:\Program Files\Mozilla Firefox 3.5 Preview\components [2013/08/30 14:09:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5b99\extensions\\Plugins: C:\Program Files\Mozilla Firefox 3.5 Preview\plugins [2013/08/30 14:09:43 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\
mozilla_cc@internetdownloadmanager.com: C:\Users\Anosh\AppData\Roaming\IDM\idmmzcc3 [2013/08/30 14:10:25 | 000,000,000 | ---D | M]
[2013/08/30 14:09:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anosh\AppData\Roaming\Mozilla\Extensions
[2013/08/30 14:09:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anosh\AppData\Roaming\Mozilla\Firefox\Profiles\bt7s7rnw.default\extensions
[2013/08/30 14:10:25 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\ANOSH\APPDATA\ROAMING\IDM\IDMMZCC3
O1 HOSTS File: ([2013/09/14 17:37:57 | 000,000,855 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableQuickReboot = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2874392040-2801162369-4055097734-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 4.2.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9D07D5C5-5CE5-48F4-9230-A85C0A514F3C}: DhcpNameServer = 8.8.8.8 4.2.2.2
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 02:12:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/09/14 17:44:25 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013/09/14 17:43:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot2
[2013/09/14 17:32:19 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013/09/14 17:15:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
[2013/09/14 17:15:53 | 000,000,000 | ---D | C] -- C:\Program Files\Tweaking.com
[2013/09/13 19:43:42 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Documents\my games
[2013/09/13 17:22:05 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/09/13 17:18:31 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/09/11 06:58:49 | 000,000,000 | ---D | C] -- C:\FRST
[2013/09/08 17:11:21 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/09/08 17:11:08 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013/09/06 10:23:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2013/09/06 10:21:47 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\VirtualStore
[2013/09/06 10:17:32 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Desktop\mbar
[2013/09/04 13:07:48 | 000,000,000 | ---D | C] -- C:\AMD
[2013/09/04 12:54:41 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Desktop\RK_Quarantine
[2013/09/04 12:35:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/09/03 16:00:21 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2013/09/03 15:52:20 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Malwarebytes
[2013/09/03 15:52:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/09/03 15:52:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/09/03 15:52:12 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/09/03 15:52:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/09/03 15:52:05 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Programs
[2013/09/03 06:23:10 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Documents\ihelper
[2013/09/03 06:23:10 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\ihelper
[2013/09/03 06:23:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PPÖúÊÖ
[2013/09/03 06:23:06 | 000,000,000 | ---D | C] -- C:\Program Files\PPÖúÊÖ
[2013/09/02 17:41:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013/09/02 17:41:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013/09/02 17:41:16 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013/09/02 17:34:32 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2013/09/02 07:10:33 | 000,000,000 | ---D | C] -- C:\Windows\System32\Hotspot Shield
[2013/09/01 16:41:18 | 000,041,160 | ---- | C] (AnchorFree Inc.) -- C:\Windows\System32\drivers\hssdrv6.sys
[2013/09/01 16:34:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
[2013/08/31 20:56:51 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Media Player Classic
[2013/08/31 16:06:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2013/08/31 06:58:21 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013/08/31 06:58:17 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Documents\GTA San Andreas User Files
[2013/08/31 06:44:24 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Skype
[2013/08/31 06:44:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/08/31 06:44:20 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013/08/31 06:44:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/08/31 06:44:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013/08/31 06:37:02 | 000,163,840 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2013/08/31 06:37:02 | 000,051,200 | ---- | C] (AMD) -- C:\Windows\System32\coinst.dll
[2013/08/31 06:37:01 | 000,421,888 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe
[2013/08/31 06:37:01 | 000,180,224 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2013/08/31 06:37:01 | 000,020,992 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll
[2013/08/31 06:02:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2013/08/31 06:02:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2013/08/31 06:02:45 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013/08/31 06:02:06 | 000,000,000 | ---D | C] -- C:\Intel
[2013/08/31 02:10:30 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013/08/31 01:21:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dream Aquarium
[2013/08/31 01:21:17 | 000,000,000 | ---D | C] -- C:\Program Files\Dream Aquarium
[2013/08/31 01:21:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Freeze Standard
[2013/08/31 01:21:00 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/08/31 01:20:57 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/08/31 01:18:51 | 000,474,368 | ---- | C] (Foxit Software Company) -- C:\Windows\fxdecod1.dll
[2013/08/31 01:18:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows se7en Tools
[2013/08/31 01:18:46 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\System32\ac3acm.acm
[2013/08/31 01:18:43 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2013/08/31 01:17:52 | 000,000,000 | ---D | C] -- C:\Program Files\Boot Configuration
[2013/08/31 01:15:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\macromed
[2013/08/31 01:11:57 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013/08/31 01:10:59 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2013/08/30 15:54:06 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Macromedia
[2013/08/30 15:54:06 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Adobe
[2013/08/30 14:26:03 | 006,094,848 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\stlang.dll
[2013/08/30 14:26:03 | 001,785,344 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\IDTNCPL.cpl
[2013/08/30 14:26:02 | 000,000,000 | ---D | C] -- C:\Windows\System32\SRSLabs
[2013/08/30 14:24:45 | 001,458,688 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\stapo.dll
[2013/08/30 14:24:45 | 000,548,352 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\stapi32.dll
[2013/08/30 14:24:45 | 000,454,656 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\stcplx.dll
[2013/08/30 14:24:45 | 000,450,560 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\drivers\stwrt.sys
[2013/08/30 14:24:45 | 000,252,928 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO30.dll
[2013/08/30 14:24:45 | 000,211,456 | ---- | C] (IDT, Inc.) -- C:\Windows\System32\st326421.dll
[2013/08/30 14:24:45 | 000,172,032 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPOShell.dll
[2013/08/30 14:24:44 | 000,000,000 | ---D | C] -- C:\Program Files\IDT
[2013/08/30 14:10:24 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\IDM
[2013/08/30 14:10:24 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Documents\Downloads
[2013/08/30 14:10:23 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\DMCache
[2013/08/30 14:10:14 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/08/30 14:10:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/08/30 14:10:11 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2013/08/30 14:09:45 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Mozilla
[2013/08/30 14:09:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 3.5 Preview
[2013/08/30 14:09:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox 3.5 Preview
[2013/08/30 14:08:19 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Mozilla
[2013/08/30 14:05:11 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2013/08/30 14:05:11 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013/08/30 14:04:55 | 000,000,000 | ---D | C] -- C:\dell
[2013/08/30 14:00:51 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Apple Computer
[2013/08/30 14:00:51 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Apple Computer
[2013/08/30 14:00:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/08/30 14:00:45 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2013/08/30 14:00:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Find
[2013/08/30 14:00:35 | 000,000,000 | ---D | C] -- C:\Program Files\Fast Find
[2013/08/30 14:00:32 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/08/30 14:00:31 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/08/30 14:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2013/08/30 14:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013/08/30 14:00:09 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Apple
[2013/08/30 14:00:08 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2013/08/30 13:59:53 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013/08/30 13:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2013/08/30 13:59:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013/08/30 13:59:27 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013/08/30 13:58:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
[2013/08/30 13:58:41 | 000,000,000 | ---D | C] -- C:\Program Files\UltraISO
[2013/08/30 13:58:41 | 000,000,000 | ---D | C] -- C:\Users\Anosh\Documents\My ISO Files
[2013/08/30 13:58:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EZB Systems
[2013/08/30 13:58:17 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\WinRAR
[2013/08/30 13:54:01 | 000,635,296 | ---- | C] (MRT
www.Win2Farsi.com) -- C:\Windows\KeyChangerMRT.exe
[2013/08/30 13:53:54 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Searches
[2013/08/30 13:53:54 | 000,000,000 | R--D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013/08/30 13:53:53 | 000,000,000 | -H-D | C] -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013/08/30 13:53:45 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Identities
[2013/08/30 13:53:43 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Contacts
[2013/08/30 13:53:43 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013/08/30 13:53:37 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\AppData\Local\Temporary Internet Files
[2013/08/30 13:53:37 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Templates
[2013/08/30 13:53:37 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Local Settings
[2013/08/30 13:53:37 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\AppData\Local\History
[2013/08/30 13:53:37 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\AppData\Local\Application Data
[2013/08/30 13:53:36 | 000,000,000 | --SD | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Videos
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Saved Games
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Pictures
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Music
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Links
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Favorites
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Downloads
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Documents
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\Desktop
[2013/08/30 13:53:36 | 000,000,000 | R--D | C] -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Start Menu
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\SendTo
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Recent
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\PrintHood
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\NetHood
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Documents\My Videos
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Documents\My Pictures
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Documents\My Music
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\My Documents
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Cookies
[2013/08/30 13:53:36 | 000,000,000 | -HSD | C] -- C:\Users\Anosh\Application Data
[2013/08/30 13:53:36 | 000,000,000 | -H-D | C] -- C:\Users\Anosh\AppData
[2013/08/30 13:53:36 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Temp
[2013/08/30 13:53:36 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Local\Microsoft
[2013/08/30 13:53:36 | 000,000,000 | ---D | C] -- C:\Users\Anosh\AppData\Roaming\Media Center Programs
[2013/08/30 13:53:33 | 000,000,000 | -HSD | C] -- C:\Recovery
========== Files - Modified Within 30 Days ==========
[2013/09/15 17:22:49 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/15 17:22:49 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/15 17:21:47 | 000,603,772 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/09/15 17:21:47 | 000,100,014 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/09/15 17:17:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/09/15 17:17:33 | 2546,372,608 | -HS- | M] () -- C:\hiberfil.sys
[2013/09/15 08:09:38 | 000,001,393 | ---- | M] () -- C:\Users\Public\Desktop\Internet Explorer.lnk
[2013/09/14 17:41:43 | 000,266,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/09/14 17:40:10 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013/09/14 17:37:57 | 000,000,855 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/09/14 17:16:09 | 000,002,121 | ---- | M] () -- C:\Users\Anosh\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2013/09/13 19:43:42 | 000,000,107 | ---- | M] () -- C:\Users\Anosh\Documents\device-data
[2013/09/13 17:28:21 | 000,248,794 | ---- | M] () -- C:\Users\Anosh\Desktop\dddd.png
[2013/09/13 17:18:15 | 001,037,278 | ---- | M] () -- C:\Users\Anosh\Desktop\adwcleaner.exe
[2013/09/08 17:25:09 | 000,037,963 | ---- | M] () -- C:\Users\Anosh\Desktop\Untitledasdasd.png
[2013/09/08 17:22:41 | 000,045,743 | ---- | M] () -- C:\Users\Anosh\Desktop\Untitled.png
[2013/09/06 09:52:15 | 000,015,511 | ---- | M] () -- C:\Users\Anosh\Desktop\1000224_492794360815925_1128985901_n.jpg
[2013/09/05 22:08:11 | 000,200,684 | ---- | M] () -- C:\Users\Anosh\Desktop\look-son-a-legend.jpg.png
[2013/09/05 13:18:08 | 000,060,684 | ---- | M] () -- C:\Users\Anosh\Desktop\SignatureVASHOZ.jpg
[2013/09/04 12:38:56 | 107,574,834 | ---- | M] () -- C:\Users\Anosh\Documents\okay.reg
[2013/09/03 15:52:13 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/03 06:23:07 | 000,000,948 | ---- | M] () -- C:\Users\Public\Desktop\PPÖúÊÖ.lnk
[2013/09/02 22:01:54 | 000,007,361 | ---- | M] () -- C:\Users\Anosh\Desktop\photo.jpg
[2013/09/02 16:40:00 | 000,050,591 | ---- | M] () -- C:\Users\Anosh\Desktop\aa.PNG
[2013/09/02 12:58:29 | 000,256,490 | ---- | M] () -- C:\Users\Anosh\Desktop\IMG_02092013_112742.png
[2013/09/01 20:29:20 | 000,022,088 | ---- | M] () -- C:\Users\Anosh\Desktop\yj4ao7d.jpg
[2013/09/01 18:27:02 | 001,001,278 | ---- | M] () -- C:\Users\Anosh\Desktop\sa-mp-037.png
[2013/09/01 16:40:40 | 000,001,006 | ---- | M] () -- C:\Users\Public\Desktop\Hotspot Shield.lnk
[2013/09/01 16:36:14 | 000,001,411 | ---- | M] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/08/31 22:19:40 | 000,358,337 | ---- | M] () -- C:\Users\Anosh\Desktop\fag.jpg
[2013/08/31 22:18:02 | 000,087,567 | ---- | M] () -- C:\Users\Anosh\Desktop\loleffingh4xhv1.jpg
[2013/08/31 22:17:27 | 000,008,662 | ---- | M] () -- C:\Users\Anosh\Desktop\images2.jpeg
[2013/08/31 06:44:21 | 000,002,503 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013/08/31 06:39:41 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2013/08/31 06:04:32 | 000,016,174 | ---- | M] () -- C:\Windows\System32\results.xml
[2013/08/31 01:18:51 | 000,002,027 | ---- | M] () -- C:\Windows\unins000.dat
[2013/08/31 01:18:50 | 000,716,122 | ---- | M] () -- C:\Windows\unins000.exe
[2013/08/31 01:14:47 | 000,043,993 | ---- | M] () -- C:\Windows\System32\license.rtf
[2013/08/31 01:13:12 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/08/30 14:10:58 | 000,034,308 | ---- | M] () -- C:\Windows\System32\BASSMOD.dll
[2013/08/30 14:09:46 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat
[2013/08/30 14:09:44 | 000,002,025 | ---- | M] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 3.5 Preview.lnk
[2013/08/30 14:09:44 | 000,002,001 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox 3.5 Preview.lnk
[2013/08/30 14:09:19 | 000,000,050 | ---- | M] () -- C:\Windows\sapl
[2013/08/30 14:06:56 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/08/30 14:01:42 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_netaapl_01009.Wdf
[2013/08/30 14:00:49 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/08/30 14:00:35 | 000,000,966 | ---- | M] () -- C:\Users\Anosh\Desktop\Fast Find.lnk
[2013/08/30 13:58:42 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\UltraISO.lnk
[2013/08/24 14:23:33 | 000,143,264 | ---- | M] () -- C:\Users\Anosh\Desktop\IMG_1701.JPG
========== Files Created - No Company Name ==========
[2013/09/14 17:16:09 | 000,002,121 | ---- | C] () -- C:\Users\Anosh\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2013/09/13 19:43:42 | 000,000,107 | ---- | C] () -- C:\Users\Anosh\Documents\device-data
[2013/09/13 17:28:21 | 000,248,794 | ---- | C] () -- C:\Users\Anosh\Desktop\dddd.png
[2013/09/13 17:18:13 | 001,037,278 | ---- | C] () -- C:\Users\Anosh\Desktop\adwcleaner.exe
[2013/09/08 17:25:09 | 000,037,963 | ---- | C] () -- C:\Users\Anosh\Desktop\Untitledasdasd.png
[2013/09/08 17:22:41 | 000,045,743 | ---- | C] () -- C:\Users\Anosh\Desktop\Untitled.png
[2013/09/06 09:52:14 | 000,015,511 | ---- | C] () -- C:\Users\Anosh\Desktop\1000224_492794360815925_1128985901_n.jpg
[2013/09/05 22:08:10 | 000,200,684 | ---- | C] () -- C:\Users\Anosh\Desktop\look-son-a-legend.jpg.png
[2013/09/05 13:18:01 | 000,060,684 | ---- | C] () -- C:\Users\Anosh\Desktop\SignatureVASHOZ.jpg
[2013/09/04 12:38:53 | 107,574,834 | ---- | C] () -- C:\Users\Anosh\Documents\okay.reg
[2013/09/03 15:52:13 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/03 06:23:07 | 000,000,948 | ---- | C] () -- C:\Users\Public\Desktop\PPÖúÊÖ.lnk
[2013/09/02 21:58:01 | 000,007,361 | ---- | C] () -- C:\Users\Anosh\Desktop\photo.jpg
[2013/09/02 16:39:55 | 000,050,591 | ---- | C] () -- C:\Users\Anosh\Desktop\aa.PNG
[2013/09/02 13:36:21 | 001,001,278 | ---- | C] () -- C:\Users\Anosh\Desktop\sa-mp-037.png
[2013/09/02 12:58:20 | 000,256,490 | ---- | C] () -- C:\Users\Anosh\Desktop\IMG_02092013_112742.png
[2013/09/01 20:29:19 | 000,022,088 | ---- | C] () -- C:\Users\Anosh\Desktop\yj4ao7d.jpg
[2013/09/01 16:40:40 | 000,001,006 | ---- | C] () -- C:\Users\Public\Desktop\Hotspot Shield.lnk
[2013/09/01 16:36:14 | 000,001,411 | ---- | C] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/08/31 22:19:05 | 000,358,337 | ---- | C] () -- C:\Users\Anosh\Desktop\fag.jpg
[2013/08/31 22:18:01 | 000,087,567 | ---- | C] () -- C:\Users\Anosh\Desktop\loleffingh4xhv1.jpg
[2013/08/31 22:17:26 | 000,008,662 | ---- | C] () -- C:\Users\Anosh\Desktop\images2.jpeg
[2013/08/31 21:27:37 | 000,143,264 | ---- | C] () -- C:\Users\Anosh\Desktop\IMG_1701.JPG
[2013/08/31 06:44:21 | 000,002,503 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013/08/31 06:39:41 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/08/31 06:37:04 | 000,963,116 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2013/08/31 06:37:03 | 000,216,876 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2013/08/31 06:37:03 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2013/08/31 06:37:02 | 002,097,056 | ---- | C] () -- C:\Windows\System32\atiumdva.cap
[2013/08/31 06:37:02 | 000,204,960 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2013/08/31 06:37:02 | 000,157,152 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2013/08/31 06:37:02 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2013/08/31 06:37:01 | 000,608,507 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2013/08/31 06:37:01 | 000,219,080 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb
[2013/08/31 06:37:01 | 000,036,338 | ---- | C] () -- C:\Windows\atiogl.xml
[2013/08/31 06:04:32 | 000,016,174 | ---- | C] () -- C:\Windows\System32\results.xml
[2013/08/31 06:01:50 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
[2013/08/31 06:01:50 | 000,067,580 | ---- | C] () -- C:\Windows\System32\iglhxs32.vp
[2013/08/31 06:01:50 | 000,059,328 | ---- | C] () -- C:\Windows\System32\iglhxg32_dev.vp
[2013/08/31 06:01:50 | 000,059,215 | ---- | C] () -- C:\Windows\System32\iglhxo32_dev.vp
[2013/08/31 06:01:50 | 000,058,781 | ---- | C] () -- C:\Windows\System32\iglhxo32.vp
[2013/08/31 06:01:50 | 000,058,684 | ---- | C] () -- C:\Windows\System32\iglhxg32.vp
[2013/08/31 06:01:49 | 001,921,265 | ---- | C] () -- C:\Windows\System32\iglhxa32.cpa
[2013/08/31 06:01:49 | 000,059,594 | ---- | C] () -- C:\Windows\System32\iglhxc32.vp
[2013/08/31 06:01:49 | 000,059,384 | ---- | C] () -- C:\Windows\System32\iglhxc32_dev.vp
[2013/08/31 06:01:49 | 000,001,074 | ---- | C] () -- C:\Windows\System32\iglhxa32.vp
[2013/08/31 06:01:47 | 000,963,388 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
[2013/08/31 06:01:47 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2013/08/31 06:01:46 | 000,223,233 | ---- | C] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2013/08/31 06:01:46 | 000,209,727 | ---- | C] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2013/08/31 06:01:46 | 000,193,862 | ---- | C] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2013/08/31 06:01:46 | 000,163,120 | ---- | C] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2013/08/31 06:01:46 | 000,158,727 | ---- | C] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2013/08/31 06:01:46 | 000,149,390 | ---- | C] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2013/08/31 06:01:46 | 000,147,759 | ---- | C] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2013/08/31 06:01:46 | 000,147,101 | ---- | C] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2013/08/31 06:01:46 | 000,147,010 | ---- | C] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2013/08/31 06:01:46 | 000,145,715 | ---- | C] () -- C:\Windows\System32\Gfxres.ro-RO.resources
[2013/08/31 06:01:46 | 000,145,211 | ---- | C] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2013/08/31 06:01:46 | 000,144,378 | ---- | C] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2013/08/31 06:01:46 | 000,143,976 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2013/08/31 06:01:46 | 000,143,730 | ---- | C] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2013/08/31 06:01:46 | 000,143,657 | ---- | C] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2013/08/31 06:01:46 | 000,142,990 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2013/08/31 06:01:46 | 000,142,617 | ---- | C] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2013/08/31 06:01:46 | 000,142,423 | ---- | C] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2013/08/31 06:01:46 | 000,142,008 | ---- | C] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2013/08/31 06:01:46 | 000,141,739 | ---- | C] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2013/08/31 06:01:46 | 000,141,574 | ---- | C] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2013/08/31 06:01:46 | 000,140,779 | ---- | C] () -- C:\Windows\System32\Gfxres.hr-HR.resources
[2013/08/31 06:01:46 | 000,137,621 | ---- | C] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2013/08/31 06:01:46 | 000,137,534 | ---- | C] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2013/08/31 06:01:46 | 000,136,873 | ---- | C] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2013/08/31 06:01:46 | 000,132,360 | ---- | C] () -- C:\Windows\System32\Gfxres.en-US.resources
[2013/08/31 06:01:46 | 000,126,035 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2013/08/31 06:01:46 | 000,124,403 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2013/08/31 06:01:46 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2013/08/31 06:01:46 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013/08/31 06:01:45 | 000,165,865 | ---- | C] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2013/08/31 06:01:45 | 000,000,255 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2013/08/31 01:21:19 | 000,126,976 | ---- | C] () -- C:\Windows\Dream Aquarium.scr
[2013/08/31 01:18:50 | 002,359,296 | ---- | C] () -- C:\Windows\PDFReader.exe
[2013/08/31 01:18:50 | 000,716,122 | ---- | C] () -- C:\Windows\unins000.exe
[2013/08/31 01:18:50 | 000,002,027 | ---- | C] () -- C:\Windows\unins000.dat
[2013/08/31 01:18:46 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2013/08/31 01:18:46 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2013/08/31 01:18:46 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2013/08/31 01:18:45 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2013/08/31 01:14:41 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013/08/31 01:14:30 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013/08/31 01:13:12 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/08/31 01:10:59 | 2546,372,608 | -HS- | C] () -- C:\hiberfil.sys
[2013/08/30 14:10:58 | 000,034,308 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2013/08/30 14:09:46 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2013/08/30 14:09:44 | 000,002,025 | ---- | C] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 3.5 Preview.lnk
[2013/08/30 14:09:44 | 000,002,001 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox 3.5 Preview.lnk
[2013/08/30 14:09:19 | 000,000,050 | ---- | C] () -- C:\Windows\sapl
[2013/08/30 14:06:56 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/08/30 14:05:14 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2013/08/30 14:01:42 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_netaapl_01009.Wdf
[2013/08/30 14:00:49 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/08/30 14:00:35 | 000,000,966 | ---- | C] () -- C:\Users\Anosh\Desktop\Fast Find.lnk
[2013/08/30 14:00:08 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/08/30 13:58:42 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\UltraISO.lnk
[2013/08/30 13:53:55 | 000,001,417 | ---- | C] () -- C:\Users\Anosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013/08/30 13:53:36 | 000,000,290 | ---- | C] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013/08/30 13:53:36 | 000,000,272 | ---- | C] () -- C:\Users\Anosh\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2011/12/05 22:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011/12/05 22:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
========== ZeroAccess Check ==========
[2009/07/14 09:12:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010/11/21 01:59:11 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\Windows\system32\wbem\fastprox.dll -- [2010/11/21 01:59:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\Windows\system32\wbem\wbemess.dll -- [2009/07/14 05:46:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013/09/15 17:20:43 | 000,000,000 | ---D | M] -- C:\Users\Anosh\AppData\Roaming\DMCache
[2013/09/04 13:19:40 | 000,000,000 | ---D | M] -- C:\Users\Anosh\AppData\Roaming\IDM
[2013/09/03 22:33:02 | 000,000,000 | ---D | M] -- C:\Users\Anosh\AppData\Roaming\ihelper
========== Purity Check ==========
< End of report >