OTL logfile created on: 2012-08-12 01:05:54 - Run 1
OTL by OldTimer - Version 3.2.57.0     Folder = C:\Documents and Settings\Administrator.ULISSES\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
1023,04 Mb Total Physical Memory | 658,41 Mb Available Physical Memory | 64,36% Memory free
2,40 Gb Paging File | 2,17 Gb Available in Paging File | 90,16% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,26 Gb Total Space | 8,69 Gb Free Space | 23,31% Space Free | Partition Type: NTFS
Drive D: | 7,94 Gb Total Space | 2,95 Gb Free Space | 37,12% Space Free | Partition Type: FAT32
Drive F: | 29,29 Gb Total Space | 7,26 Gb Free Space | 24,79% Space Free | Partition Type: FAT32
 
Computer Name: ULISSES | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-12 01:01:00 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator.ULISSES\Desktop\OTL.exe
PRC - [2008-04-14 06:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-07-18 21:36:33 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2011-06-17 19:33:04 | 000,237,008 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe -- (McComponentHostService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2011-09-10 21:45:11 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2008-06-03 08:20:54 | 003,100,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007-11-14 21:48:20 | 000,084,992 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2006-02-16 18:51:00 | 004,156,416 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService)
DRV - [2005-02-01 08:20:00 | 000,229,888 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1708537768-436374069-725345543-500\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1708537768-436374069-725345543-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-1708537768-436374069-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-18 21:36:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-01-10 15:05:56 | 000,000,000 | ---D | M]
 
[2011-12-31 12:46:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-11-02 17:22:53 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-07-18 21:36:34 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-09-14 08:54:32 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-09-10 21:38:10 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-09-10 21:38:09 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-09-10 21:38:09 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-09-10 21:38:09 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-09-10 21:38:09 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-09-10 21:38:09 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2004-08-04 14:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UIAnimation] C:\Documents and Settings\Murdurer\Local Settings\Application Data\Microsoft\Windows\4948\UIAnimation.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\LOLRecorder.lnk = C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\Murdurer\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1708537768-436374069-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95BAE933-C58E-42AE-9C9A-54D40B2D23E5}: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-02-19 13:27:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-12 01:00:54 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator.ULISSES\Desktop\OTL.exe
[2012-08-12 00:45:31 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator.ULISSES\PrivacIE
[2012-08-12 00:45:05 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator.ULISSES\IETldCache
[2012-08-12 00:44:32 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator.ULISSES\Application Data\Microsoft
[2012-08-12 00:44:32 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator.ULISSES\SendTo
[2012-08-12 00:44:32 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator.ULISSES\Application Data
[2012-08-12 00:44:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator.ULISSES\Start Menu\Programs\Startup
[2012-08-12 00:44:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator.ULISSES\Start Menu
[2012-08-12 00:44:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator.ULISSES\Start Menu\Programs\Accessories
[2012-08-12 00:44:32 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator.ULISSES\Cookies
[2012-08-12 00:44:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator.ULISSES\Templates
[2012-08-12 00:44:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator.ULISSES\Recent
[2012-08-12 00:44:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator.ULISSES\PrintHood
[2012-08-12 00:44:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator.ULISSES\NetHood
[2012-08-12 00:44:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator.ULISSES\Local Settings
[2012-08-12 00:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator.ULISSES\My Documents
[2012-08-12 00:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator.ULISSES\Local Settings\Application Data\Microsoft
[2012-08-12 00:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator.ULISSES\Application Data\Macromedia
[2012-08-12 00:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator.ULISSES\Favorites
[2012-08-12 00:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator.ULISSES\Desktop
[2012-08-12 00:22:23 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012-08-05 21:01:26 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012-08-05 20:59:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2012-08-05 20:58:55 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012-08-05 20:58:55 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012-08-05 20:58:54 | 002,000,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2012-08-05 20:58:51 | 011,111,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2012-08-05 20:58:51 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012-08-05 20:58:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2012-08-05 20:57:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012-08-01 17:41:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\KB905474
[2012-07-31 17:36:20 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll
[2012-07-31 17:35:14 | 000,456,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012-07-31 17:34:51 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll
[2012-07-31 17:34:36 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2012-07-31 17:33:53 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2012-07-31 17:33:21 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys
[2012-07-31 17:33:17 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll
[2012-07-31 17:33:17 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll
[2012-07-31 17:30:00 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mup.sys
[2012-07-31 17:29:58 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2012-07-31 17:29:57 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe
[2012-07-31 17:29:15 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012-07-31 17:28:50 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2012-07-31 17:23:35 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2012-07-31 17:23:31 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2012-07-31 17:21:47 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe
[2012-07-31 17:21:03 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[2012-07-31 17:20:52 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2012-07-31 00:22:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2012-07-30 17:54:22 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleaut32.dll
[2012-07-30 17:54:22 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll
[2012-07-30 17:54:21 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\localspl.dll
[2012-07-30 17:54:20 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
[2012-07-30 17:54:19 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wintrust.dll
[2012-07-30 17:54:19 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imagehlp.dll
[2012-07-30 17:54:18 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswebdvd.dll
[2012-07-30 17:54:17 | 002,148,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012-07-30 17:54:17 | 001,866,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
[2012-07-30 17:54:16 | 002,192,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012-07-30 17:54:16 | 002,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012-07-30 17:54:14 | 000,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2012-07-30 17:54:02 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2012-07-30 17:53:59 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll
[2012-07-30 17:40:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-12 01:01:00 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator.ULISSES\Desktop\OTL.exe
[2012-08-12 00:59:22 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-08-12 00:54:07 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2012-08-11 22:03:34 | 000,001,612 | ---- | M] () -- C:\WINDOWS\VPlayer.INI
[2012-08-11 22:03:34 | 000,000,100 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl
[2012-08-11 20:07:40 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2012-08-07 08:57:33 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-08-05 20:49:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-08-01 18:05:39 | 000,493,054 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-08-01 18:05:38 | 000,083,598 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-08-01 18:00:44 | 000,122,136 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-14 10:32:41 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-12 00:44:32 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Administrator.ULISSES\Start Menu\Programs\Remote Assistance.lnk
[2012-08-12 00:44:32 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Administrator.ULISSES\Start Menu\Programs\Windows Media Player.lnk
[2012-08-05 21:03:58 | 000,071,888 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2012-08-01 17:41:11 | 000,000,260 | ---- | C] () -- C:\WINDOWS\tasks\WGASetup.job
[2012-07-31 17:20:45 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-07-31 17:20:45 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012-07-30 17:54:25 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sbe.dll
[2011-12-29 18:12:54 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-12-19 19:38:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2011-12-08 01:03:41 | 000,001,612 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2011-10-31 20:02:03 | 000,000,091 | ---- | C] () -- C:\WINDOWS\CIV.INI
[2011-10-08 12:13:29 | 000,000,059 | ---- | C] () -- C:\WINDOWS\AutoScreenRecorder.INI
[2011-08-21 22:38:10 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-08-21 22:38:09 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011-08-21 22:38:08 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011-08-21 22:38:08 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011-08-21 22:38:07 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011-08-21 13:23:31 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-08-21 13:22:14 | 000,122,136 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-08-21 13:13:48 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2011-08-21 13:13:48 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2011-08-21 12:39:12 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2011-08-21 11:58:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011-08-21 11:43:51 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011-08-21 11:43:43 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011-08-21 11:43:42 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011-08-21 11:43:39 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2011-08-21 11:43:39 | 000,172,033 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011-08-21 11:38:32 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-08-21 11:32:10 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008-08-27 18:00:49 | 000,000,000 | ---- | C] () -- C:\Program Files\temp01
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-07-03 17:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011-08-22 17:52:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gadu-Gadu 10
[2011-10-08 12:41:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\avidemux
[2011-08-21 12:09:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\DAEMON Tools Lite
[2011-08-22 18:51:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\Gadu-Gadu 10
[2012-08-12 00:17:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\hellomoto
[2011-12-19 19:41:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\Leadertech
[2011-08-21 17:04:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\LolClient
[2012-05-24 17:43:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\LolClient2
[2012-05-03 12:25:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\Might & Magic Heroes VI
[2011-12-21 19:27:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\OpenOffice.org
[2012-05-10 18:11:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\Oracle
[2011-12-11 12:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\TS3Client
[2011-12-10 19:41:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\Unity
[2012-08-12 00:17:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Murdurer\Application Data\uTorrent
[2012-08-12 00:54:07 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >