Logfile of HijackThis v1.97.7
Scan saved at 01:25:37, on 2004–12–05
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32 vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svmhost.exe
C:Program FilesGadu–Gadugg.exe
C:WINDOWSSystem32msgrsv32.exe
C: otalcmdTOTALCMD.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:WINDOWSSystem32devldr32.exe
D:–––HijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 – BHO: (no name) – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:Program FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocx
O2 – BHO: (no name) – {A5366673–E8CA–11D3–9CD9–0090271D075B} – C:PROGRA~1FLASHGETjccatch.dll
O3 – Toolbar: FlashGet Bar – {E0E899AB–F487–11D5–8D29–0050BA6940E3} – C:PROGRA~1FLASHGETfgiebar.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [CloneCDElbyCDFL] "C:Program FilesElaborate BytesCloneCDElbyCheck.exe" /L ElbyCDFL
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 –k
O4 – HKLM..Run: [DXM6Patch_981116] C:WINDOWSp_981116.exe /Q:A
O4 – HKLM..Run: [Messenger] C:WINDOWSSystem32msgrsv32.exe
O4 – HKLM..Run: [System Update] C:WINDOWSSystem32duxwsxup.exe
O4 – HKLM..Run: [MKS_MENU] C:Program FilesMKSBinmks_menu.exe
O4 – HKLM..Run: [Microsoft Windows Update] svmhost.exe
O4 – HKLM..RunServices: [Microsoft Windows Update] svmhost.exe
O4 – HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NVMCTRAY.DLL,NvTaskbarInit
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [Microsoft Windows Update] svmhost.exe
O4 – HKLM..RunOnce: [Microsoft Windows Update] svmhost.exe
O4 – HKCU..RunOnce: [Microsoft Windows Update] svmhost.exe
O8 – Extra context menu item: Ściągnij przy pomocy FlashGet'a – C:Program FilesFlashGetjc_link.htm
O8 – Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a – C:Program FilesFlashGetjc_all.htm
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Related (HKLM)
O9 – Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 – Extra button: FlashGet (HKLM)
O9 – Extra 'Tools' menuitem: &FlashGet (HKLM)
O16 – DPF: {15AD4789–CDB4–47E1–A9DA–992EE8E6BAD6} – http://static.windupdates.com/cab/ClickYesToContinue/ie/Bridge–c139.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 – HKLMSystemCCSServicesTcpip..{3378ED93–A327–41DC–91BF–E706A18DBF1C}: NameServer = 217.30.137.200,217.30.129.149
O17 – HKLMSystemCCSServicesTcpip..{CA8E6A79–2783–4D0B–A37E–3945E03545E6}: NameServer = 217.30.137.200 217.30.129.149
O17 – HKLMSystemCS1ServicesTcpip..{3378ED93–A327–41DC–91BF–E706A18DBF1C}: NameServer = 217.30.137.200,217.30.129.149
O17 – HKLMSystemCS2ServicesTcpip..{3378ED93–A327–41DC–91BF–E706A18DBF1C}: NameServer = 217.30.137.200,217.30.129.149