Combofix:
ComboFix 08-06-03.1 - Tomek 2008-06-04 15:57:23.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.2552 [GMT 2:00]
Running from: C:\Documents and Settings\Tomek\Pulpit\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\regwizc.dll.bak1
.
((((((((((((((((((((((((( Files Created from 2008-05-04 to 2008-06-04 )))))))))))))))))))))))))))))))
.
2008-06-04 15:50 . 2008-06-04 15:50 <DIR> d-------- C:\Program Files\Trend Micro
2008-06-03 19:28 . 2008-06-03 19:28 <DIR> d-------- C:\Program Files\NVIDIA Corporation
2008-06-03 19:27 . 2008-06-03 19:27 <DIR> d-------- C:\Program Files\NVIDIA nTune Performance Application
2008-06-03 15:49 . 2008-06-03 15:49 9,045 --a------ C:\Program.RPT
2008-06-01 23:23 . 2008-06-01 23:23 <DIR> d-------- C:\Program Files\SystemRequirementsLab
2008-06-01 23:23 . 2008-06-01 23:23 <DIR> d-------- C:\Documents and Settings\Tomek\SystemRequirementsLab
2008-06-01 20:04 . 2008-06-03 19:19 <DIR> d-------- C:\Program Files\SpeedFan
2008-06-01 20:04 . 2008-06-01 20:04 45 --a------ C:\WINDOWS\system32\initdebug.nfo
2008-06-01 13:16 . 2008-06-01 13:16 8,929 --a------ C:\Program1.RPT
2008-05-31 16:14 . 2008-05-31 16:14 4,096 --a------ C:\WINDOWS\d3dx.dat
2008-05-31 15:55 . 2008-05-31 15:55 <DIR> d-------- C:\Program Files\JoWooD
2008-05-30 20:18 . 2008-05-30 20:18 <DIR> d-------- C:\Fraps
2008-05-30 18:09 . 2008-05-30 18:09 <DIR> d--h----- C:\$AVG8.VAULT$
2008-05-28 22:18 . 2008-05-28 22:18 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-05-28 22:18 . 2008-06-03 21:48 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-05-28 22:18 . 2008-05-28 22:18 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-05-28 22:18 . 2008-06-03 21:48 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-05-28 22:16 . 2008-05-28 22:16 <DIR> dr-h----- C:\Documents and Settings\Tomek\Dane aplikacji\SecuROM
2008-05-28 22:16 . 2008-05-28 22:16 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-05-28 21:53 . 2007-05-16 16:45 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll
2008-05-28 21:51 . 2008-05-29 15:20 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-05-28 21:49 . 2008-05-28 21:49 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\DAEMON Tools
2008-05-28 21:49 . 2008-05-28 21:49 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-05-26 15:31 . 2008-05-26 15:31 <DIR> d-------- C:\Program Files\Consumer Update Firmware
2008-05-20 15:28 . 2008-05-20 15:28 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\ArcSoft
2008-05-20 15:27 . 2008-05-20 15:28 <DIR> d-------- C:\Program Files\QuickTime
2008-05-20 15:27 . 2008-05-20 15:27 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2008-05-20 15:27 . 2004-08-04 14:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-05-20 15:26 . 2008-05-20 15:26 <DIR> d-------- C:\Program Files\SanDisk
2008-05-20 15:26 . 2008-05-20 15:26 <DIR> d-------- C:\Program Files\Common Files\ArcSoft
2008-05-20 15:26 . 2004-05-04 11:53 1,645,320 --a------ C:\WINDOWS\system32\gdiplus.dll
2008-05-20 09:26 . 2008-05-20 09:26 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-05-18 22:24 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-05-18 22:23 . 2008-05-18 22:24 <DIR> d-------- C:\Program Files\Java
2008-05-18 22:23 . 2008-05-18 22:23 <DIR> d-------- C:\Program Files\Common Files\Java
2008-05-18 19:30 . 2008-05-18 19:30 <DIR> d-------- C:\Program Files\Real Alternative
2008-05-18 19:30 . 2003-03-19 05:14 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-05-18 19:30 . 2004-01-12 00:00 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-05-17 15:10 . 2008-05-17 15:10 <DIR> d-------- C:\Program Files\uTorrent
2008-05-17 15:09 . 2008-06-04 15:57 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\uTorrent
2008-05-17 14:44 . 2008-05-17 14:44 <DIR> d-------- C:\Program Files\xp-AntiSpy
2008-05-17 14:23 . 2008-05-17 14:23 <DIR> d-------- C:\Program Files\Stardock
2008-05-17 14:21 . 2008-05-17 14:23 <DIR> d-------- C:\Program Files\BootXP2
2008-05-17 14:21 . 2004-08-04 14:00 2,149,888 --a------ C:\WINDOWS\system32\LOGOOS.EXE
2008-05-17 14:21 . 2008-05-16 16:20 211 --------- C:\BOOT.BXP
2008-05-17 11:14 . 2008-05-17 11:20 <DIR> d-------- C:\Program Files\VMKeyboard
2008-05-17 10:03 . 2008-06-04 15:42 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-05-17 10:03 . 2008-05-17 10:03 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-17 10:03 . 2008-05-17 10:03 75,272 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-05-17 10:03 . 2008-05-17 10:03 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-05-17 10:02 . 2008-05-17 10:02 <DIR> d-------- C:\Program Files\AVG
2008-05-17 10:02 . 2008-05-17 10:02 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\avg8
2008-05-16 21:35 . 2008-05-16 21:35 <DIR> d-------- C:\WINDOWS\system32\windows media
2008-05-16 21:34 . 2008-05-16 21:35 <DIR> d--h----- C:\WINDOWS\msdownld.tmp
2008-05-16 21:34 . 2008-05-16 21:34 <DIR> d-------- C:\Program Files\Windows Media Components
2008-05-16 21:25 . 2008-05-16 21:25 <DIR> d-------- C:\Program Files\Mpeg2Decoder
2008-05-16 21:24 . 2008-05-16 21:24 <DIR> d-------- C:\Program Files\Deskshare
2008-05-16 21:24 . 2008-05-16 21:24 <DIR> d-------- C:\Program Files\Common Files\DeskShare Shared
2008-05-16 21:24 . 2008-05-31 19:40 <DIR> d-a------ C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2008-05-16 21:24 . 2008-05-16 21:24 356,352 --a------ C:\WINDOWS\eSellerateEngine.dll
2008-05-16 21:24 . 2004-12-07 10:11 258,352 --a------ C:\WINDOWS\system32\Unicows.dll
2008-05-16 21:18 . 2008-05-16 21:32 <DIR> d-------- C:\Program Files\All Video Converter
2008-05-16 21:00 . 2008-05-16 21:00 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\Media Player Classic
2008-05-16 20:54 . 2008-05-16 20:54 25 --a------ C:\WINDOWS\cdplayer.ini
2008-05-16 20:50 . 2008-05-18 19:26 <DIR> d-------- C:\Program Files\Common Files\Real
2008-05-16 20:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-05-16 19:15 . 2008-05-16 19:15 <DIR> d-------- C:\Program Files\foobar2000
2008-05-16 19:15 . 2008-05-26 18:06 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\foobar2000
2008-05-16 17:30 . 2008-05-16 17:30 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2008-05-16 17:29 . 2008-05-16 18:42 <DIR> d-------- C:\Program Files\Winamp
2008-05-16 17:29 . 2008-05-16 19:12 <DIR> d-------- C:\Documents and Settings\Tomek\Dane aplikacji\Winamp
2008-05-16 17:22 . 2008-05-16 17:22 <DIR> d-------- C:\KAV
2008-05-16 17:08 . 2008-05-16 17:32 <DIR> d-------- C:\Program Files\Kaspersky Lab
2008-05-16 17:07 . 2008-05-16 17:07 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2008-05-16 17:03 . 2008-05-16 17:04 <DIR> d-------- C:\NISSetup
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-03 20:08 --------- d-----w C:\Program Files\Gadu-Gadu
2008-06-03 14:36 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2008-06-03 14:33 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-20 13:27 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-17 08:00 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Avira
2008-05-16 16:27 --------- d-----w C:\Program Files\WIDCOMM
2008-05-16 16:26 --------- d-----w C:\Documents and Settings\Tomek\Dane aplikacji\Gadu-Gadu
2008-05-16 14:43 --------- d-----w C:\Program Files\Opera
2008-05-16 14:34 --------- d-----w C:\Program Files\Realtek
2008-05-16 14:33 315,392 ----a-w C:\WINDOWS\HideWin.exe
2008-05-16 14:33 --------- d-----w C:\Documents and Settings\Tomek\Dane aplikacji\InstallShield
2008-05-16 14:25 --------- d-----w C:\Program Files\microsoft frontpage
2008-05-16 14:23 --------- d-----w C:\Program Files\Usługi online
2008-04-30 15:27 442,368 ----a-w C:\WINDOWS\system32\NVUNINST.EXE
2008-03-31 21:25 682,496 ----a-w C:\WINDOWS\system32\divx.dll
2008-03-28 17:41 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll
2008-03-21 20:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-03-21 20:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00 15360]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856]
"NVIDIA nTune"="C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 19:25 81920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-08-10 09:21 16384000 C:\WINDOWS\RTHDCPL.exe]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-03 05:46 13529088]
"nwiz"="nwiz.exe" [2008-05-03 05:46 1630208 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-03 05:46 86016]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-17 10:02 1177368]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
BTTray.lnk - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe [2006-05-12 13:33:22 581693]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 22:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2008-03-20 12:04 2127296 C:\Program Files\Gadu-Gadu\gg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-05-20 15:28 155648 C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 20:49 36352 C:\Program Files\Winamp\winampa.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\Polish\\setup.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-17 10:03]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-05-17 10:02]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-17 10:02]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-05-17 10:03]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;D:\everestultimate450(dobreprogramy.pl)\kerneld.wnt [2008-03-17 00:00]
S3 FXDrv32;FXDrv32;E:\FXDrv32.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\autorun.exe
*Newly Created Service* - CATCHME
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-04 15:58:01
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\D:\everestultimate450(dobreprogramy.pl)\kerneld.wnt"
.
Completion time: 2008-06-04 15:58:18
ComboFix-quarantined-files.txt 2008-06-04 13:58:16
Pre-Run: 3,439,370,240 bajtów wolnych
Post-Run: 4,207,734,784 bajtów wolnych
177
i hijackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:50:34, on 2008-06-04
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\system32\wpabaln.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{7157861D-3337-48B1-A464-D6CBECA85EB0}: NameServer = 213.227.75.1,213.227.72.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{7157861D-3337-48B1-A464-D6CBECA85EB0}: NameServer = 213.227.75.1,213.227.72.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{7157861D-3337-48B1-A464-D6CBECA85EB0}: NameServer = 213.227.75.1,213.227.72.1
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 5037 bytes
