I am trying to resurect an old Compaq Armada M700. It boots slow and runs slower. Can somebody please read this and offer any suggestion that might help? Thanks...
Here is the scan list from System Scanner:
Deckard's System Scanner v20071014.68
Run by Sandy on 2007-12-14 10:41:32
Computer is in Normal Mode.
--------------------------------------------------------------------------------
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Sandy .exe) ------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:43:26 AM, on 12/14/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINNT\System32\NMSSvc.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\Promon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\PRPCUI.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe
C:\WINNT\system32\MsgSys.EXE
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\wuauclt.exe
E:\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Sandy Richardson.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Wireless-B Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - https://www01.webpcfos.com/webpcfos/Citrix/wficat.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
O16 - DPF: {413D6754-BFD4-47FE-9346-319559290BFA} (HTECtrl Class) - http://www.webpcfos.com/webpcfos/websabre/HTEweb.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1157942096047
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
--
End of file - 5328 bytes
-- File Associations -----------------------------------------------------------
.js - JSFile - DefaultIcon - C:\WINNT\System32\WScript.exe,3
.js - JSFile - shell\open\command - C:\WINNT\System32\WScript.exe "%1" %*
.vbs - VBSFile - DefaultIcon - C:\WINNT\System32\WScript.exe,2
.vbs - VBSFile - shell\open\command - C:\WINNT\System32\WScript.exe "%1" %*
.vbs - VBSFile - shell\edit\command - C:\WINNT\System32\Notepad.exe %1
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R0 Gernuwa - c:\winnt\system32\drivers\gernuwa.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 AW_HOST - c:\winnt\system32\drivers\aw_host5.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 awlegacy - c:\winnt\system32\drivers\awlegacy.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 ClntMgmt.sys (ClntMgmt) - c:\winnt\system32\drivers\clntmgmt.sys <Not Verified; Compaq Computer Corp; Compaq Client Management Driver>
R2 PRPC - c:\winnt\system32\drivers\prpc.sys <Not Verified; Intel Corp.; Intel(R) SpeedStep(TM) technology Applet>
R3 NMSCFG (NIC Management Service Configuration Driver) - c:\winnt\system32\drivers\nmscfg.sys <Not Verified; Intel Corporation; Intel(R) NMSCFG Driver>
R3 PCANDIS5 (PCANDIS5 Protocol Driver) - c:\winnt\system32\pcandis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
S3 VisorUsb (Handspring USB) - c:\winnt\system32\drivers\visorusb.sys <Not Verified; Handspring, Inc; Visor(R)>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 NMSSvc (Intel(R) NMS) - c:\winnt\system32\nmssvc.exe <Not Verified; Intel Corporation; NMS>
S3 awhost32 (pcAnywhere Host Service) - c:\program files\symantec\pcanywhere\awhost32.exe <Not Verified; Symantec Corporation; pcAnywhere>
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Files created between 2007-11-14 and 2007-12-14 -----------------------------
2007-12-14 10:42:57 0 d-------- C:\Program Files\Trend Micro
2007-12-08 09:27:40 16384 --a-----t C:\WINNT\system32\Perflib_Perfdata_54c.dat
2007-12-07 18:37:37 0 d-------- C:\Intel12.3
2007-12-07 17:38:54 0 d-------- C:\SWSetup
2007-12-04 08:43:52 0 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-12-04 08:42:46 11264 --a------ C:\WINNT\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
2007-12-04 08:37:08 9 --a------ C:\WINNT\system\cpqbsys.dll
2007-12-04 08:36:32 54222 --a------ C:\WINNT\system32\drivers\ClntMgmt.sys <Not Verified; Compaq Computer Corp; Compaq Client Management Driver>
2007-12-04 08:36:27 0 d-------- C:\Program Files\Compaq
2007-12-04 07:57:35 57344 --a------ C:\WINNT\system32\prpclang.dll <Not Verified; Intel Corp.; Intel Corp. prpclang>
2007-12-04 07:57:35 15130 --a------ C:\WINNT\system32\drivers\prpc.sys <Not Verified; Intel Corp.; Intel(R) SpeedStep(TM) technology Applet>
2007-12-04 07:57:34 41984 --a------ C:\WINNT\system32\prpcui.exe <Not Verified; Intel Corporation; Intel(R) SpeedStep(TM) technology applet>
2007-12-04 07:57:34 43008 --a------ C:\WINNT\system32\PRPCUI.dll <Not Verified; Intel Corporation; Intel(R) SpeedStep(TM) technology applet>
2007-12-04 07:54:15 0 d-------- C:\WINNT\cpqdiag
2007-12-04 07:51:25 0 d--h----- C:\WINNT\PIF
2007-12-03 21:28:47 0 --a------ C:\WINNT\nsreg.dat
2007-12-03 21:28:11 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\Mozilla
2007-12-03 11:08:48 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\OfficeUpdate12
2007-12-03 11:02:11 0 d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2007-12-03 10:42:22 0 d-------- C:\Program Files\Microsoft.NET
2007-12-03 10:41:54 0 d-------- C:\Program Files\Microsoft ActiveSync
2007-12-03 10:36:56 0 d-------- C:\WINNT\SHELLNEW
2007-12-03 10:29:04 0 d-------- C:\WINNT\PCHEALTH
2007-12-03 10:17:11 0 dr-h----- C:\MSOCache
2007-12-03 08:16:11 0 d-------- C:\WINNT\BDOSCAN8
2007-12-03 00:04:44 0 d-------- C:\Program Files\Yahoo!
2007-12-03 00:00:37 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-02 23:56:10 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-02 23:30:44 16384 --a-----t C:\WINNT\system32\Perflib_Perfdata_134.dat
2007-12-02 22:54:25 0 d-------- C:\WINNT\system32\SoftwareDistribution
-- Find3M Report ---------------------------------------------------------------
2007-12-04 09:08:55 0 d-------- C:\Program Files\NavNT
2007-12-04 08:46:19 4212 ---h----- C:\WINNT\system32\zllictbl.dat
2007-12-04 07:54:15 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-03 21:41:34 0 d-------- C:\Program Files\Lavasoft
2007-12-03 21:41:33 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\Lavasoft
2007-12-03 18:23:05 0 d-------- C:\Program Files\Snapshot Viewer
2007-12-03 10:02:54 1286038 ---h----- C:\WINNT\ShellIconCache
2007-12-03 10:00:46 0 d-------- C:\Program Files\Quicken
2007-12-03 09:57:34 0 d-------- C:\Program Files\Google
2007-12-02 23:56:10 0 d-a------ C:\Program Files\Common Files
2007-10-25 10:26:48 53248 --a------ C:\WINNT\bdoscandel.exe
2007-10-22 10:57:52 524288 --a------ C:\WINNT\opuc.dll <Not Verified; Microsoft Corporation; 2007 Microsoft Office system>
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="mobsync.exe" [06/19/03 01:05p C:\WINNT\system32\mobsync.exe]
"Promon.exe"="Promon.exe" [05/13/02 04:02a C:\WINNT\system32\PROMon.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" [11/09/06 04:07p]
"PRPCMonitor"="PRPCUI.exe" [04/24/01 10:00a C:\WINNT\system32\prpcui.exe]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [09/06/07 04:14p]
"vptray"="C:\Program Files\NavNT\vptray.exe" [10/09/00 08:50a]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/14/2004 5:44:06 AM]
Wireless-B Notebook Adapter Utility.lnk - C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe [12/25/2003 6:48:03 PM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"
-- End of Deckard's System Scanner: finished at 2007-12-14 10:45:22 ------------
Here is the scan list from System Scanner:
Deckard's System Scanner v20071014.68
Run by Sandy on 2007-12-14 10:41:32
Computer is in Normal Mode.
--------------------------------------------------------------------------------
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Sandy .exe) ------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:43:26 AM, on 12/14/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINNT\System32\NMSSvc.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\Promon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\PRPCUI.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe
C:\WINNT\system32\MsgSys.EXE
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\wuauclt.exe
E:\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Sandy Richardson.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Wireless-B Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - https://www01.webpcfos.com/webpcfos/Citrix/wficat.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
O16 - DPF: {413D6754-BFD4-47FE-9346-319559290BFA} (HTECtrl Class) - http://www.webpcfos.com/webpcfos/websabre/HTEweb.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1157942096047
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
--
End of file - 5328 bytes
-- File Associations -----------------------------------------------------------
.js - JSFile - DefaultIcon - C:\WINNT\System32\WScript.exe,3
.js - JSFile - shell\open\command - C:\WINNT\System32\WScript.exe "%1" %*
.vbs - VBSFile - DefaultIcon - C:\WINNT\System32\WScript.exe,2
.vbs - VBSFile - shell\open\command - C:\WINNT\System32\WScript.exe "%1" %*
.vbs - VBSFile - shell\edit\command - C:\WINNT\System32\Notepad.exe %1
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R0 Gernuwa - c:\winnt\system32\drivers\gernuwa.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 AW_HOST - c:\winnt\system32\drivers\aw_host5.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 awlegacy - c:\winnt\system32\drivers\awlegacy.sys <Not Verified; Symantec Corporation; pcAnywhere>
R1 ClntMgmt.sys (ClntMgmt) - c:\winnt\system32\drivers\clntmgmt.sys <Not Verified; Compaq Computer Corp; Compaq Client Management Driver>
R2 PRPC - c:\winnt\system32\drivers\prpc.sys <Not Verified; Intel Corp.; Intel(R) SpeedStep(TM) technology Applet>
R3 NMSCFG (NIC Management Service Configuration Driver) - c:\winnt\system32\drivers\nmscfg.sys <Not Verified; Intel Corporation; Intel(R) NMSCFG Driver>
R3 PCANDIS5 (PCANDIS5 Protocol Driver) - c:\winnt\system32\pcandis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
S3 VisorUsb (Handspring USB) - c:\winnt\system32\drivers\visorusb.sys <Not Verified; Handspring, Inc; Visor(R)>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 NMSSvc (Intel(R) NMS) - c:\winnt\system32\nmssvc.exe <Not Verified; Intel Corporation; NMS>
S3 awhost32 (pcAnywhere Host Service) - c:\program files\symantec\pcanywhere\awhost32.exe <Not Verified; Symantec Corporation; pcAnywhere>
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Files created between 2007-11-14 and 2007-12-14 -----------------------------
2007-12-14 10:42:57 0 d-------- C:\Program Files\Trend Micro
2007-12-08 09:27:40 16384 --a-----t C:\WINNT\system32\Perflib_Perfdata_54c.dat
2007-12-07 18:37:37 0 d-------- C:\Intel12.3
2007-12-07 17:38:54 0 d-------- C:\SWSetup
2007-12-04 08:43:52 0 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-12-04 08:42:46 11264 --a------ C:\WINNT\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
2007-12-04 08:37:08 9 --a------ C:\WINNT\system\cpqbsys.dll
2007-12-04 08:36:32 54222 --a------ C:\WINNT\system32\drivers\ClntMgmt.sys <Not Verified; Compaq Computer Corp; Compaq Client Management Driver>
2007-12-04 08:36:27 0 d-------- C:\Program Files\Compaq
2007-12-04 07:57:35 57344 --a------ C:\WINNT\system32\prpclang.dll <Not Verified; Intel Corp.; Intel Corp. prpclang>
2007-12-04 07:57:35 15130 --a------ C:\WINNT\system32\drivers\prpc.sys <Not Verified; Intel Corp.; Intel(R) SpeedStep(TM) technology Applet>
2007-12-04 07:57:34 41984 --a------ C:\WINNT\system32\prpcui.exe <Not Verified; Intel Corporation; Intel(R) SpeedStep(TM) technology applet>
2007-12-04 07:57:34 43008 --a------ C:\WINNT\system32\PRPCUI.dll <Not Verified; Intel Corporation; Intel(R) SpeedStep(TM) technology applet>
2007-12-04 07:54:15 0 d-------- C:\WINNT\cpqdiag
2007-12-04 07:51:25 0 d--h----- C:\WINNT\PIF
2007-12-03 21:28:47 0 --a------ C:\WINNT\nsreg.dat
2007-12-03 21:28:11 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\Mozilla
2007-12-03 11:08:48 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\OfficeUpdate12
2007-12-03 11:02:11 0 d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2007-12-03 10:42:22 0 d-------- C:\Program Files\Microsoft.NET
2007-12-03 10:41:54 0 d-------- C:\Program Files\Microsoft ActiveSync
2007-12-03 10:36:56 0 d-------- C:\WINNT\SHELLNEW
2007-12-03 10:29:04 0 d-------- C:\WINNT\PCHEALTH
2007-12-03 10:17:11 0 dr-h----- C:\MSOCache
2007-12-03 08:16:11 0 d-------- C:\WINNT\BDOSCAN8
2007-12-03 00:04:44 0 d-------- C:\Program Files\Yahoo!
2007-12-03 00:00:37 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-02 23:56:10 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-02 23:30:44 16384 --a-----t C:\WINNT\system32\Perflib_Perfdata_134.dat
2007-12-02 22:54:25 0 d-------- C:\WINNT\system32\SoftwareDistribution
-- Find3M Report ---------------------------------------------------------------
2007-12-04 09:08:55 0 d-------- C:\Program Files\NavNT
2007-12-04 08:46:19 4212 ---h----- C:\WINNT\system32\zllictbl.dat
2007-12-04 07:54:15 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-03 21:41:34 0 d-------- C:\Program Files\Lavasoft
2007-12-03 21:41:33 0 d-------- C:\Documents and Settings\Sandy Richardson\Application Data\Lavasoft
2007-12-03 18:23:05 0 d-------- C:\Program Files\Snapshot Viewer
2007-12-03 10:02:54 1286038 ---h----- C:\WINNT\ShellIconCache
2007-12-03 10:00:46 0 d-------- C:\Program Files\Quicken
2007-12-03 09:57:34 0 d-------- C:\Program Files\Google
2007-12-02 23:56:10 0 d-a------ C:\Program Files\Common Files
2007-10-25 10:26:48 53248 --a------ C:\WINNT\bdoscandel.exe
2007-10-22 10:57:52 524288 --a------ C:\WINNT\opuc.dll <Not Verified; Microsoft Corporation; 2007 Microsoft Office system>
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="mobsync.exe" [06/19/03 01:05p C:\WINNT\system32\mobsync.exe]
"Promon.exe"="Promon.exe" [05/13/02 04:02a C:\WINNT\system32\PROMon.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" [11/09/06 04:07p]
"PRPCMonitor"="PRPCUI.exe" [04/24/01 10:00a C:\WINNT\system32\prpcui.exe]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [09/06/07 04:14p]
"vptray"="C:\Program Files\NavNT\vptray.exe" [10/09/00 08:50a]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/14/2004 5:44:06 AM]
Wireless-B Notebook Adapter Utility.lnk - C:\Program Files\Linksys\Wireless-B Notebook Adapter\WPC11Cfg.exe [12/25/2003 6:48:03 PM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"
-- End of Deckard's System Scanner: finished at 2007-12-14 10:45:22 ------------
