Bobi_robert:

Poza:

O9 – Extra button: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)

tym jest czysto

O9 – Extra button: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)

Logfile of HijackThis v1.98.2
Scan saved at 00:18:00, on 2004–12–18
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
C:Program FilesGadu–Gadugg.exe
C:Program FilesKaspersky LabKaspersky Anti–HackerKAVPF.exe
C:WINDOWSSystem32Ati2evxx.exe
C:Program FilesWinampwinampa.exe
C:Program FilesWinampwinamp.exe
C:THEBAT! hebat.exe
C:Program FilesOperaOpera.exe
C: oolsHijackThisHijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.bankmacieja.com/pages/rotator.php?user=ivaho
O2 – BHO: TGTSoft Explorer Toolbar Changer – {C333CF63–767F–4831–94AC–E683D962C63C} – C:Program FilesTGTSoftStyleXPTGT_BHO.dll
O3 – Toolbar: Cash4Action Bar – {AFDF828B–490E–43c4–A92C–BCC6D482C770} – C:Program FilesInternet ExplorerPLUGINScash4action.dll
O3 – Toolbar: Clixies Bar – {E39FEDC3–8B80–428f–A2DE–6A09D67704EF} – C:Program FilesInternet ExplorerPLUGINSClixies.dll
O3 – Toolbar: Learn Opinions Bar – {6A57D0E5–EA17–4b4a–9432–011A43B2B375} – C:Program FilesLearnOpinions BarLearnOpinionsBar.dll
O3 – Toolbar: &Google – {2318C2B1–4965–11d4–9B18–009027A5CD4F} – C:WINDOWSDownloaded Program Filesgooglenav.dll
O4 – HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 – HKLM..Run: [KAVPersonal50] C:Program FilesKaspersky LabKaspersky Anti–Virus Personalkav.exe /minimize
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O4 – Global Startup: Kaspersky Anti–Hacker.lnk = ?
O8 – Extra context menu item: &Google Search – res://C:WINDOWSDownloaded Program Filesgooglenav.dll/cmsearch.html
O8 – Extra context menu item: Backward &Links – res://C:WINDOWSDownloaded Program Filesgooglenav.dll/cmbacklinks.html
O8 – Extra context menu item: Cac&hed Snapshot of Page – res://C:WINDOWSDownloaded Program Filesgooglenav.dll/cmcache.html
O8 – Extra context menu item: Pobierz z &BitSpirit – E:BitSpiritsurl.htm
O8 – Extra context menu item: Si&milar Pages – res://C:WINDOWSDownloaded Program Filesgooglenav.dll/cmsimilar.html
O9 – Extra button: (no name) – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:WINDOWSSystem32msjava.dll
O9 – Extra 'Tools' menuitem: Sun Java Console – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:WINDOWSSystem32msjava.dll
O9 – Extra button: Clixies Bar – {6C810694–6589–4534–8F82–DE5DCC72C64B} – C:Program FilesInternet ExplorerPLUGINSClixies.dll
O9 – Extra 'Tools' menuitem: Clixies Bar – {6C810694–6589–4534–8F82–DE5DCC72C64B} – C:Program FilesInternet ExplorerPLUGINSClixies.dll
O9 – Extra button: Cash4Action Bar – {8584F7F8–479C–4c78–9AC1–EEB18D89A8CA} – C:Program FilesInternet ExplorerPLUGINScash4action.dll
O9 – Extra 'Tools' menuitem: Cash4Action Bar – {8584F7F8–479C–4c78–9AC1–EEB18D89A8CA} – C:Program FilesInternet ExplorerPLUGINScash4action.dll
O9 – Extra button: Learn Opinions Bar – {B72C67F8–4848–454f–88DE–ACD99EBEAD82} – C:Program FilesLearnOpinions BarLearnOpinionsBar.dll
O9 – Extra 'Tools' menuitem: Learn Opinions Bar – {B72C67F8–4848–454f–88DE–ACD99EBEAD82} – C:Program FilesLearnOpinions BarLearnOpinionsBar.dll
O9 – Extra button: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na angielski – {CCCE5D70–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Tłumacz na polski – {CCCE5D71–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra button: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O9 – Extra 'Tools' menuitem: Zachowaj przetłumaczoną stronę – {CCCE5D72–9AA2–40F1–9C6B–12A255F08500} – (no file) (HKCU)
O16 – DPF: {6CB5E471–C305–11D3–99A8–000086395495} (Google Activate) – http://toolbar.google.com/data/pl/big/1.1.62–big/GoogleNav.cab
O16 – DPF: {BF5E26B7–7087–4C2D–B0BA–0098F7CBED6B} (LiveX(5.4.0.0) Control) – http://glowackiego.no–ip.info/cab/Live.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab