OTL logfile created on: 2012-07-12 17:42:45 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Documents and Settings\Zaplecze\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
991,48 Mb Total Physical Memory | 732,51 Mb Available Physical Memory | 73,88% Memory free
1,58 Gb Paging File | 1,45 Gb Available in Paging File | 91,36% Paging File free
Paging file location(s): D:\pagefile.sys 718 718 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 15,63 Gb Total Space | 8,71 Gb Free Space | 55,76% Space Free | Partition Type: NTFS
Drive D: | 58,90 Gb Total Space | 56,18 Gb Free Space | 95,38% Space Free | Partition Type: NTFS
Drive E: | 7,45 Gb Total Space | 7,40 Gb Free Space | 99,28% Space Free | Partition Type: FAT32
 
Computer Name: NCRLABO | User Name: Zaplecze | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-12 17:26:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-02-15 00:35:44 | 002,015,968 | ---- | M] (UltraVNC) [Auto | Stopped] -- C:\Program Files\UltraVNC\winvnc.exe -- (uvnc_service)
SRV - [2009-07-29 16:19:48 | 000,020,480 | ---- | M] (UPOS System Sp. z o.o.) [On_Demand | Stopped] -- D:\UPOS\Aplikacje\PrePaid\PrePaidServer\PrePaidServer.exe -- (PrePaidServer)
SRV - [2009-07-10 14:13:14 | 010,862,671 | ---- | M] (UPOS System sp. z o. o.) [On_Demand | Stopped] -- D:\UPOS\Aplikacje\EK2EFT\Serwer\EFTServer.exe -- (EFTServer)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2010-04-03 12:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0150.sys -- (RsFx0150)
DRV - [2008-12-02 14:05:34 | 000,118,656 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2008-04-09 08:38:52 | 000,033,032 | ---- | M] (RS232 Touch Panel) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\UtcRs232.sys -- (utcrs232)
DRV - [2007-01-16 14:56:00 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP)
DRV - [2005-03-25 15:04:40 | 002,314,560 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.pl/ [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: f:\mozilla\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: f:\mozilla\Mozilla Firefox\plugins
 
[2012-07-11 15:10:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Mozilla\Extensions
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [UTCService] C:\Program Files\TouchUtility\UTCService.exe (TouchUtility)
O4 - HKLM..\Run: [WcsPlugInService] C:\Documents and Settings\Zaplecze\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\1337\WcsPlugInService.exe ()
O4 - Startup: C:\Documents and Settings\Zaplecze\Menu Start\Programy\Autostart\Skrót do BOS.lnk = D:\Sygnity Retail\BOS\BOS.exe (Sygnity SA)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1331740981381 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1331740929266 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{584B8CA7-5225-46ED-8AA4-4248438914A8}: DhcpNameServer = 192.168.1.1 0.0.0.0
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-09-09 10:24:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-08-04 18:13:52 | 000,000,110 | -H-- | M] () - E:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-12 17:26:57 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe
[2012-07-12 14:24:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\hellomoto
[2012-07-11 16:30:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2012-07-11 15:10:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Mozilla
[2012-06-26 14:42:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Fugazo
[2012-06-26 14:41:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Menu Start\Programy\World Mosaics 4
[2012-06-26 14:41:11 | 000,000,000 | ---D | C] -- C:\Program Files\FishBone Games
[2012-06-26 14:41:10 | 000,000,000 | ---D | C] -- C:\Downloads
[2012-06-23 05:35:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Media Player Classic
[2012-06-23 05:28:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack
[2012-06-23 05:27:55 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-12 17:26:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe
[2012-07-12 17:23:44 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-12 17:23:31 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-12 17:05:18 | 000,120,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-12 11:35:11 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\psd_backup.job
[2012-06-30 14:35:34 | 000,000,412 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Moje dokumenty\spider.sav
[2012-06-26 14:41:15 | 000,001,833 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Pulpit\World Mosaics 4.lnk
[2012-06-23 05:27:21 | 000,003,584 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-06-26 14:41:15 | 000,001,833 | ---- | C] () -- C:\Documents and Settings\Zaplecze\Pulpit\World Mosaics 4.lnk
[2012-06-23 05:28:01 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012-06-23 05:27:21 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\Zaplecze\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-03-15 13:35:46 | 000,165,256 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2012-03-14 18:41:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-03-14 13:45:14 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009-09-09 11:04:23 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-03-22 17:17:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2012-06-26 14:42:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fugazo
[2012-07-12 14:24:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\hellomoto
[2012-07-12 11:35:11 | 000,000,286 | ---- | M] () -- C:\WINDOWS\Tasks\psd_backup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >