2006-08-07,07:17:28
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows 2000 Professional Service Pack 4 (Build 2195)
- Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<vptray><C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe> [Symantec Corporation]
<ATIModeChange><; Ati2mdxx.exe> [ATI Technologies, Inc.]
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [Lenovo Group Limited]
<TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe> []
<BMMLREF><C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE> []
<PRPCMonitor><PRPCUI.exe> [Intel Corporation]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<QCWLICON><C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe> [IBM Corp.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINNT\system32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll> []
==================================
Startup Folders
[Acrobat Assistant]
<C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk><H>
==================================
Services
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINNT\system32\Ati2evxx.exe><N/A>
[Configuresoft ECM Remote Client / CSIRemoteC]
<C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe><Configuresoft Inc.>
[Cisco Systems, Inc. VPN Service / CVPND]
<c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe><Cisco Systems, Inc.>
[DefWatch / DefWatch]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[EvtEng / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[ThinkPad PM Service / IBMPMSVC]
<C:\WINNT\system32\ibmpmsvc.exe><N/A>
[Intel File Transfer / Intel File Transfer]
<C:\WINNT\system32\cba\xfr.exe><Intel? Corporation>
[Intel PDS / Intel PDS]
<C:\WINNT\system32\cba\pds.exe><Intel? Corporation>
[iPassConnectEngine / iPassConnectEngine]
<C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe><iPass>
[iPCAgent / iPCAgent]
<C:\Program Files\iPass\iPassConnect\iPCAgent.exe><iPass, Inc.>
[Symantec AntiVirus Client / Norton AntiVirus Server]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe><Symantec Corporation>
[QCONSVC / QCONSVC]
<System32\QCONSVC.EXE><IBM Corp.>
[RegSrvc / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[WLTRYSVC / WLTRYSVC]
<C:\WINNT\System32\wltrysvc.exe C:\WINNT\System32\bcmwltry.exe><N/A>
==================================
Browser Add-ons
[Shockwave Flash
Object]
{14A21378-5BB1-4BC4-95D5-5D3F51527F6F} <C:\WINNT\system32\smflash.ocx, Macromedia, Inc.>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[Shockwave ActiveX Control]
{166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINNT\system32\macromed\Shockwave 10\Download.dll, Adobe Systems, Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&Google Search]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html, N/A>
==================================
Running Processes
[PID: 220][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 244][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 240][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[C:\WINNT\system32\NavLogon.dll] <N/A><N/A>
[C:\WINNT\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.3984>
[C:\WINNT\system32\hccutils.DLL] <Intel Corporation><3.0.0.3984>
[PID: 292][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 304][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 420][C:\WINNT\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 472][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 496][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[PID: 528][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[PID: 560][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 640][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[C:\WINNT\system32\pdfports.dll] <Adobe Systems Incorporated.><5.0.000>
[C:\Program Files\Adobe\Acrobat 5.0\Distillr\adistres.dll] <N/A><N/A>
[PID: 696][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 712][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 720][c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe] <Cisco Systems, Inc.><4.0 (Rel)>
[C:\WINNT\system32\vsdata.dll] <Zone Labs Inc.><3.7.078.001>
[PID: 776][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe] <Symantec Corporation><8.00.01.425>
[PID: 688][C:\WINNT\system32\cba\pds.exe] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\WINNT\system32\CSL.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CSSM32s.dll] <Intel Corporation><1, 1, 2, 3>
[PID: 856][C:\Program Files\iPass\iPassConnect\iPCAgent.exe] <iPass, Inc.><3, 35, 0, 0>
[PID: 904][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\CBA.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\i2ldvp3.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAPI32.DLL] <Symantec Corp.><4.1.0.22>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060802.020\NAVEX32a.DLL] <Symantec Corporation><20061.2.0.26>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060802.020\NAVENG32.DLL] <Symantec Corporation><20061.2.0.26>
