A więc podczas normalnego użytkowania komputera wszystko jest ok, jednak gdy włączę gta 4 (gra korzysta z internetu - social club, i games for windows Live), po jakimś czasie tracę podłączenie z internetem - przeglądarki też nie działają, potrzebny jest restart routera i kompa, aby wszystko wróciło do normy. Wklejam logi do sprawdzenia, bo staje się to już irytujące - np. brak możliwości gry w multi. Wcześniej wszystko było ok. 
  
Net- Neostrada 1mb/s 
Router- Asmax ar-904u 
reszta w sygnaturce 
  
  
 
 » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - "HijackThis"
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:52:32, on 2009-01-11 
Platform: Windows Vista SP1 (WinNT 6.00.1905) 
MSIE: Internet Explorer v7.00 (7.00.6001.18000) 
Boot mode: Normal 
  
Running processes: 
C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe 
C:\Program Files\Alwil Software\Avast4\ashDisp.exe 
C:\Program Files (x86)\Winamp\winampa.exe 
C:\Program Files (x86)\Java\jre6\bin\jusched.exe 
F:\Gry\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe 
C:\Program Files (x86)\Tlen.pl\tlen.exe 
C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
C:\Users\Tomek\Desktop\HiJackThis.exe 
  
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
F2 - REG:system.ini: UserInit=userinit.exe 
O1 - Hosts: ::1 localhost 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll 
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll 
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll 
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll 
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime 
O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin 
O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun 
O4 - HKCU\..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe 
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 52\axcmd.exe" /automount 
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe" 
O4 - HKCU\..\Run: [RGSC] F:\Gry\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent 
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA') 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA') 
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA') 
O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files (x86)\BitSpirit\bsurl.htm 
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll 
O13 - Gopher Prefix:  
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL 
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe 
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) 
O23 - Service: Usuga stanu ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing) 
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe 
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\Windows\SysWOW64\CTsvcCDA.exe 
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) 
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 
O23 - Service: Google Update Service (gupdate1c939d34daea59) (gupdate1c939d34daea59) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) 
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe 
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) 
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) 
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe 
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) 
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) 
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) 
  
-- 
End of file - 8159 bytes 
 
 
 » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - "Silent Runners"
"Silent Runners.vbs", revision 59, http://www.silentrunners.org/
Operating System: Windows Vista 
Output limited to non-default values, except where indicated by "{++}" 
  
  
Startup items buried in registry: 
--------------------------------- 
  
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} 
"Sidebar" = "C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" [MS] 
"swg" = "C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" ["Google Inc."] 
"ehTray.exe" = "C:\Windows\ehome\ehTray.exe" [MS] 
"AlcoholAutomount" = ""C:\Program Files (x86)\Alcohol Soft\Alcohol 52\axcmd.exe" /automount" ["Alcohol Soft Development Team"] 
"CTSyncU.exe" = ""C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe"" [file not found] 
"RGSC" = "F:\Gry\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent" [null data] 
  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} 
"Windows Defender" = "C:\Program Files\Windows Defender\MSASCui.exe -hide" 
"RtHDVCpl" = "RAVCpl64.exe" ["Realtek Semiconductor"] 
"Skytel" = "Skytel.exe" ["Realtek Semiconductor Corp."] 
  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ 
"{5E2121EE-0300-11D4-8D3B-444553540000}" = "Catalyst Context Menu extension" 
  -> {HKLM...CLSID} = "SimpleShlExt Class" 
                   \InProcServer32\(Default) = "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll" ["Advanced Micro Devices, Inc."] 
"{472083B0-C522-11CF-8763-00608CC02F24}" = "avast" 
  -> {HKLM...CLSID} = "avast" 
                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShA64.dll" ["ALWIL Software"] 
  
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\ 
<<!>> "BootExecute" = "autocheck autochk *"|"lsdelete" [null data] 
  
HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ 
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" 
  -> {HKLM...CLSID} = "avast" 
                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShA64.dll" ["ALWIL Software"] 
WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" 
  -> {HKLM...CLSID} = "WinRAR" 
                   \InProcServer32\(Default) = "C:\Program Files (x86)\WinRAR\rarext64.dll" [null data] 
  
HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ 
WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" 
  -> {HKLM...CLSID} = "WinRAR" 
                   \InProcServer32\(Default) = "C:\Program Files (x86)\WinRAR\rarext64.dll" [null data] 
  
HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ 
avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" 
  -> {HKLM...CLSID} = "avast" 
                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShA64.dll" ["ALWIL Software"] 
WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" 
  -> {HKLM...CLSID} = "WinRAR" 
                   \InProcServer32\(Default) = "C:\Program Files (x86)\WinRAR\rarext64.dll" [null data] 
  
  
Default executables: 
-------------------- 
  
HKLM\SOFTWARE\Classes\.hta\(Default) = "htafile" 
<<!>> HKLM\SOFTWARE\Classes\htafile\shell\open\command\(Default) = "C:\Windows\SysWOW64\mshta.exe "%1" %*" [MS] 
  
  
Group Policies {GPedit.msc branch and setting}: 
----------------------------------------------- 
  
Note: detected settings may not have any effect. 
  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ 
  
"NoActiveDesktop" = (REG_DWORD) dword:0x00000001 
{unrecognized setting} 
  
"NoActiveDesktopChanges" = (REG_DWORD) dword:0x00000001 
{unrecognized setting} 
  
"ForceActiveDesktopOn" = (REG_DWORD) dword:0x00000000 
{unrecognized setting} 
  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ 
  
"ConsentPromptbehaviorAdmin" = (REG_DWORD) dword:0x00000002 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: behavior Of The Elevation Prompt For Administrators In Admin Approval Mode} 
  
"ConsentPromptbehaviorUser" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: behavior Of The Elevation Prompt For Standard Users} 
  
"EnableInstallerDetection" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Detect Application Installations And Prompt For Elevation} 
  
"EnableLUA" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Run All Administrators In Admin Approval Mode} 
  
"EnableSecureUIAPaths" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Only elevate UIAccess applications that are installed in secure locations} 
  
"EnableVirtualization" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Virtualize file and registry write failures to per-user locations} 
  
"PromptOnSecureDesktop" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Switch to the secure desktop when prompting for elevation} 
  
"shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
Shutdown: Allow system to be shut down without having to log on} 
  
"undockwithoutlogon" = (REG_DWORD) dword:0x00000001 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
Devices: Allow undock without having to log on} 
  
"FilterAdministratorToken" = (REG_DWORD) dword:0x00000000 
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| 
User Account Control: Admin Approval Mode for the Built-in Administrator Account} 
  
"EnableUIADesktopToggle" = (REG_DWORD) dword:0x00000000 
{unrecognized setting} 
  
  
Active Desktop and Wallpaper: 
----------------------------- 
  
Active Desktop may be disabled at this entry: 
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState 
  
Displayed if Active Desktop enabled and wallpaper not set by Group Policy: 
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ 
"Wallpaper" = "C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg" 
  
Displayed if Active Desktop disabled and wallpaper not set by Group Policy: 
HKCU\Control Panel\Desktop\ 
"Wallpaper" = "C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp" 
  
  
Windows Portable Device AutoPlay Handlers 
----------------------------------------- 
  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ 
  
CTPlayAudioOnArrivalu\ 
"Provider" = "Creative MediaSource 5 Player" 
"InvokeProgID" = "CTAutoPLu.AudioCDPlayer.1" 
"InvokeVerb" = "open" 
HKLM\SOFTWARE\Classes\CTAutoPLu.AudioCDPlayer.1\shell\open\command\(Default) = ""C:\Program Files (x86)\Creative\MediaSource5\CTCMSu.exe" /T=CLASSKEY_AudioCD IN %L PlayNow" ["Creative Technology Ltd"] 
  
CTPlayMusicFilesOnArrivalu\ 
"Provider" = "Creative MediaSource 5 Player" 
"InvokeProgID" = "CTAutoPLu.MusicFilesPlayer.1" 
"InvokeVerb" = "open" 
HKLM\SOFTWARE\Classes\CTAutoPLu.MusicFilesPlayer.1\shell\open\command\(Default) = ""C:\Program Files (x86)\Creative\MediaSource5\CTCMSu.exe" /Organizer" ["Creative Technology Ltd"] 
  
MSPlayCDAudioOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.AudioCD" 
"InvokeVerb" = "play" 
HKLM\SOFTWARE\Classes\WMP.AudioCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L"" [MS] 
  
MSPlayDVDMovieOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.DVD" 
"InvokeVerb" = "play" 
HKLM\SOFTWARE\Classes\WMP.DVD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"" [MS] 
  
MSPlaySuperVideoCDMovieOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.VCD" 
"InvokeVerb" = "play" 
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS] 
  
MSPlayVideoCDMovieOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.VCD" 
"InvokeVerb" = "play" 
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS] 
  
MSRipCDAudioOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.RipCD" 
"InvokeVerb" = "Rip" 
HKLM\SOFTWARE\Classes\WMP.RipCD\shell\Rip\Command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L" " [MS] 
  
MSWMPBurnCDOnArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.BurnCD" 
"InvokeVerb" = "Burn" 
HKLM\SOFTWARE\Classes\WMP.BurnCD\shell\Burn\Command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L" " [MS] 
  
MSWMPBurnDataDVDArrival\ 
"Provider" = "@wmploc.dll,-6502" 
"InvokeProgID" = "WMP.BurnDVD" 
"InvokeVerb" = "Burn" 
HKLM\SOFTWARE\Classes\WMP.BurnDVD\shell\Burn\Command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:DVDWrite /Device:"%L" " [MS] 
  
WIA_{3FAA1A96-D1CF-4DA4-BC7D-437D599BEFF1}\ 
"Provider" = "Picasa2" 
"CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}" 
"InitCmdLine" = "/WiaCmd;C:\Program Files (x86)\Picasa2\PicasaMediaDetector.exe /StiDevice:%1 /StiEvent:%2;" 
  -> {HKLM...CLSID} = "WPDShextAutoplay" 
                   \LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS] 
  
WIA_{829298F4-047D-425B-B0BD-88293A4B8C20}\ 
"Provider" = "Canon CameraWindow" 
"CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}" 
"InitCmdLine" = "/WiaCmd;C:\Program Files (x86)\Canon\CameraWindow\CameraWindowMC\CameraLauncher.exe /StiDevice:%1 /StiEvent:%2;" 
  -> {HKLM...CLSID} = "WPDShextAutoplay" 
                   \LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS] 
  
  
Winsock2 Service Provider DLLs: 
------------------------------- 
  
Namespace Service Providers 
  
HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 
000000000001\LibraryPath = "%SystemRoot%\system32\NLAapi.dll" [MS] 
000000000002\LibraryPath = "%SystemRoot%\system32\napinsp.dll" [MS] 
000000000003\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS] 
000000000004\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS] 
000000000005\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 
000000000006\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 
  
Transport Service Providers 
  
HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: 
%SystemRoot%\system32\mswsock.dll [MS], 01 - 10 
  
  
Running Services (Display Name, Service Name, Path {Service DLL}): 
------------------------------------------------------------------ 
  
Ati External Event Utility, Ati External Event Utility, "C:\Windows\system32\Ati2evxx.exe" ["ATI Technologies Inc."] 
avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" ["ALWIL Software"] 
avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" ["ALWIL Software"] 
avast! Mail Scanner, avast! Mail Scanner, ""C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"] 
avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"] 
Creative Service for CDROM Access, Creative Service for CDROM Access, "C:\Windows\SysWOW64\CTsvcCDA.exe" ["Creative Technology Ltd"] 
Lavasoft Ad-Aware Service, aawservice, ""C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe"" ["Lavasoft"] 
PnkBstrA, PnkBstrA, "C:\Windows\system32\PnkBstrA.exe" [file not found] 
Przeglądarka komputera, Browser, "C:\Windows\System32\svchost.exe -k netsvcs" {"C:\Windows\System32\browser.dll" [MS]} 
StarWind AE Service, StarWindServiceAE, "C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe" ["Rocket Division Software"] 
Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0, FontCache3.0.0.0, "C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe" [MS] 
Usługa Protokół SSTP, SstpSvc, "C:\Windows\system32\svchost.exe -k LocalService" {"C:\Windows\system32\sstpsvc.dll" [MS]} 
Windows Driver Foundation — User-mode Driver Framework, wudfsvc, "C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" {"C:\Windows\System32\WUDFSvc.dll" [MS]} 
Windows Image Acquisition (WIA), stisvc, "C:\Windows\system32\svchost.exe -k imgsvc" {"C:\Windows\System32\wiaservc.dll" [MS]} 
  
  
---------- (launch time: 2009-01-11 01:53:47) 
<<!>>: Suspicious data at a malware launch point. 
  
+ This report excludes default entries except where indicated. 
+ To see *everywhere* the script checks and *everything* it finds, 
  launch it from a command prompt or a shortcut with the -all parameter. 
+ The search for DESKTOP.INI DLL launch points on all local fixed drives 
  took 41 seconds. 
---------- (total run time: 60 seconds)