GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Intel(R) Pentium(R) 4 CPU 2.40GHz 2392 MHz

Processors number:
		1

BIOS:
		DELL   - 27d40a12 Phoenix ROM BIOS PLUS Version 1.10 A32 BIOS Date: 10/18/04

System Date:
		11/03/2009 (dd/mm/yyyy)

Total phisical memory:
		1023,340 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		1023,340 Mb

Available virtual memory:
		1993,988 Mb

Hard drives:
		FUJITSU MHT2030AT

Logical disks structure:
		c:\ FIXED SYSTEM Full size - 23611 Mb, Free size - 14754 Mb, File system - NTFS
		d:\ CDROM Full size - 23611 Mb, Free size - 14754 Mb, File system - 
		e:\ FIXED Full size - 5004 Mb, Free size - 4965 Mb, File system - NTFS

Video adapters:
		MOBILITY RADEON 7500
			DRIVER - system32\DRIVERS\ati2mtag.sys ("c:\windows\system32\drivers\ati2mtag.sys") File version = 6.13.10.6230, File size = 539392, File modification date = 08/11/2002  03:31, File description = ATI Radeon Miniport Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |3912840|0xb4991feb456ea3dab743bce85a5303eb|

NetWork adapters:
		NETGEAR 108 Mbps Wireless PC Card WG511T
			DRIVER - system32\DRIVERS\wg511nd5.sys ("c:\windows\system32\drivers\wg511nd5.sys") File version = 4.0.0.140, File size = 449888, File modification date = 25/07/2005  22:48, File description = Driver for Atheros AR5001 Wireless Network Adapter, Product Name = Atheros AR5001 Wireless Network Adapter, Product version = 4.0.0.140, Company name = Atheros Communications, Inc. (2001-2004 Atheros Communications, Inc. All Rights Reserved.) |-2056780248|0x8a91fd656d0832195eafb6cb45b06c27|
		1394 Net Adapter
			DRIVER - system32\DRIVERS\nic1394.sys ("c:\windows\system32\drivers\nic1394.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61824, File modification date = 13/04/2008  18:51, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-664318305|0xe9e47cfb2d461fa0fc75b7a74c6383ea|
		802.11g USB 2.0 Wireless LAN Adapter
			DRIVER - system32\DRIVERS\sis163u.sys ("c:\windows\system32\drivers\sis163u.sys") File version = 5.1.1039.1020, File size = 167424, File modification date = 31/12/2004  22:46, File description = SiS163 usb Wireless LAN Adapter Driver, Product Name = NDIS NIC Driver, Product version = 5.1.1039.1020, Company name = SiS Corporation (SiS Corporation) |1676611955|0x24c563c9ab67db0d80070c8e0945ff87|
		Microsoft TV/Video Connection
			DRIVER - system32\DRIVERS\NdisIP.sys ("c:\windows\system32\drivers\ndisip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 10880, File modification date = 13/04/2008  18:46, File description = Microsoft IP Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-495085904|0x7ff1f1fd8609c149aa432f95a8163d97|
		Broadcom 440x 10/100 Integrated Controller
			DRIVER - system32\DRIVERS\bcm4sbxp.sys ("c:\windows\system32\drivers\bcm4sbxp.sys") File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|
		Broadcom 440x 10/100 Integrated Controller
			DRIVER - system32\DRIVERS\bcm4sbxp.sys ("c:\windows\system32\drivers\bcm4sbxp.sys") File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|

Modems:
		PCTEL 2304WT V.92 MDC Modem

Multimedia:
		SigmaTel C-Major Audio
			DRIVER - system32\drivers\STAC97.sys ("c:\windows\system32\drivers\stac97.sys") File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
		Microsoft Streaming Clock Proxy
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  18:39, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
		Microsoft Streaming Quality Manager Proxy
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  18:39, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
		Microsoft Streaming Service Proxy
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  18:39, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
		Microsoft Kernel System Audio Device
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
		Microsoft Kernel DRM Audio Descrambler
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
		Microsoft Kernel Wave Audio Mixer
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  18:45, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
		Microsoft Kernel Acoustic Echo Canceller
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  16:39, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
		Microsoft Kernel GS Wavetable Synthesizer
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  18:45, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
		Microsoft Kernel DLS Synthesizer
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
		Microsoft WINMM WDM Audio Compatibility Driver
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
		Microsoft Kernel Audio Splitter
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
		SigmaTel C-Major Audio
			DRIVER - system32\drivers\STAC97.sys ("c:\windows\system32\drivers\stac97.sys") File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
		Microsoft LifeCam VX-1000.
			DRIVER - system32\drivers\usbaudio.sys ("c:\windows\system32\drivers\usbaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
		Microsoft LifeCam VX-1000.
			DRIVER - system32\drivers\usbaudio.sys ("c:\windows\system32\drivers\usbaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
		Closed Caption Decoder
			DRIVER - system32\DRIVERS\CCDECODE.sys ("c:\windows\system32\drivers\ccdecode.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 17024, File modification date = 13/04/2008  18:46, File description = WDM Closed Caption VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123412182|0x0be5aef125be881c4f854c554f2b025c|
		NABTS/FEC VBI Codec
			DRIVER - system32\DRIVERS\NABTSFEC.sys ("c:\windows\system32\drivers\nabtsfec.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 85248, File modification date = 13/04/2008  18:46, File description = WDM NABTS/FEC VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-702127793|0x5b50f1b2a2ed47d560577b221da734db|
		World Standard Teletext Codec
			DRIVER - system32\DRIVERS\WSTCODEC.SYS ("c:\windows\system32\drivers\wstcodec.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 19200, File modification date = 13/04/2008  18:46, File description = WDM WST Codec Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation (Copyright (C) Philips Semiconductors. 1981-1999) |-991709184|0xc98b39829c2bbd34e454150633c62c78|
		BDA Slip De-Framer
			DRIVER - system32\DRIVERS\SLIP.sys ("c:\windows\system32\drivers\slip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 11136, File modification date = 13/04/2008  18:46, File description = Microsoft Slip Deframing Filter Minidriver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1964362680|0x866d538ebe33709a5c9f5c62b73b7d14|
		BDA IPSink
			DRIVER - system32\DRIVERS\StreamIP.sys ("c:\windows\system32\drivers\streamip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 15232, File modification date = 13/04/2008  18:46, File description = Microsoft IP Test Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |735896275|0x77813007ba6265c4b6098187e6ed79d2|
		Microsoft Streaming Tee/Sink-to-Sink Converter
			DRIVER - system32\drivers\MSTEE.sys ("c:\windows\system32\drivers\mstee.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
		Microsoft Streaming Tee/Sink-to-Sink Converter
			DRIVER - system32\drivers\MSTEE.sys ("c:\windows\system32\drivers\mstee.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
		Microsoft Streaming Tee/Sink-to-Sink Converter
			DRIVER - system32\drivers\MSTEE.sys ("c:\windows\system32\drivers\mstee.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
		Microsoft Streaming Tee/Sink-to-Sink Converter
			DRIVER - system32\drivers\MSTEE.sys ("c:\windows\system32\drivers\mstee.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
		Microsoft LifeCam VX-1000.
			DRIVER - system32\drivers\usbaudio.sys ("c:\windows\system32\drivers\usbaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
		Microsoft LifeCam VX-1000.
			DRIVER - system32\drivers\usbaudio.sys ("c:\windows\system32\drivers\usbaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|

Printers:
		Symantec Fax Starter Edition - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\olfdnt40.dll ("c:\windows\system32\spool\drivers\w32x86\2\olfdnt40.dll") File version = 9.0.98.0105, File size = 107104, File modification date = 11/12/1998  16:29, File description = Symantec Fax Starter Edition Printer Driver, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |1284090731|0x1661d4a1fb4cf6fae2830ce80d9ac239|
		Microsoft XPS Document Writer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mxdwdrv.dll ("c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll") File version = 6.0.6001.22204 (vistasp1_ldr.080616-1509), File size = 765440, File modification date = 06/07/2008  12:06, File description = Microsoft XPS Document Writer, Product Name = Microsoft Windows Operating System, Product version = 6.0.6001.22204, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |990767315|0x63b6e4c603fbde9299ba77b721265712|

Removable devices:
		QSI CDRW/DVD SBW-242
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  18:40, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Professional Edition, 5.1.2600 Service Pack 3

Environment variables:
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\****\Application Data
		CLASSPATH=.;C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=AMIT
		ComSpec=C:\WINDOWS\system32\cmd.exe
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\****
		LOGONSERVER=\\AMIT
		NUMBER_OF_PROCESSORS=1
		OS=Windows_NT
		Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem;C:\Program Files\MATLAB\R2008a\bin;C:\Program Files\MATLAB\R2008a\bin\win32
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 9, GenuineIntel
		PROCESSOR_LEVEL=15
		PROCESSOR_REVISION=0209
		ProgramFiles=C:\Program Files
		QTJAVA=C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\DOCUME~1\AMITCH~1\LOCALS~1\Temp
		TMP=C:\DOCUME~1\AMITCH~1\LOCALS~1\Temp
		USERDOMAIN=AMIT
		USERNAME=****
		USERPROFILE=C:\Documents and Settings\****
		windir=C:\WINDOWS

Installed network protocols:
---------clients---------
		Client for Microsoft Networks
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		WebClient
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
--------protocol---------
		Internet Protocol (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 20/06/2008  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-946646010|0x9aefa14bd6b182d61e3119fa5f436d3d|
		Point to Point Tunneling Protocol
		NDIS Usermode I/O Protocol
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 13/04/2008  18:55, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
		Layer 2 Tunneling Protocol
		Remote Access NDIS WAN Driver
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:20, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
		Message-oriented TCP/IP Protocol (SMB session)
		AEGIS Protocol (IEEE 802.1x) v3.2.0.3
			DRIVER - system32\DRIVERS\AegisP.sys ("c:\windows\system32\drivers\aegisp.sys") File version = 3.2.0.3, File size = 17801, File modification date = 09/02/2008  00:42, File description = IEEE 802.1X Protocol Driver, Product Name = AEGIS Client 3.2.0.3, Product version = 3.2.0.3, Company name = Meetinghouse Data Communications (Copyright (C) Meetinghouse Data Communications 1997-2004) |1913693436|0x2c5c22990156a1063e19ad162191dc1d|
		WINS Client(TCP/IP) Protocol
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:21, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
		Realtek EAPPkt Protocol
		Point to Point Protocol Over Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  18:57, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
--------services---------
		Dial-Up Client
		Steelhead
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		File and Printer Sharing for Microsoft Networks
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Application Layer Gateway
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
		QoS Packet Scheduler
			DRIVER - system32\DRIVERS\psched.sys ("c:\windows\system32\drivers\psched.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  18:56, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
		NetBIOS Interface
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  18:56, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
		Remote Access Connection Manager
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Wireless Zero Configuration
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Generic Packet Classifier
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  18:56, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
		Dial-Up Server
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 04/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
-----------by type----------
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]

Installed applications/hotfixes:
		Adobe Flash Player ActiveX 9.0.124.0 (Adobe Systems Incorporated)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
		Adobe Flash Player 10 Plugin 10.0.12.36 (Adobe Systems Incorporated)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
		ATI Display Driver
			DEINSTALLATION: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
		CCleaner (remove only)
			DEINSTALLATION: "C:\Program Files\CCleaner\uninst.exe"
		Comcast High-Speed Internet Install Wizard (Comcast Cable Communications, LLC)
			DEINSTALLATION: C:\Program Files\support.com\uninstall\chsi_uninstaller.exe
		I8kfanGUI V3.0 3.0 (Christian Diefer)
			DEINSTALLATION: "C:\Program Files\I8kfanGUI\uninstall.exe"
		Microsoft Internationalized Domain Names Mitigation APIs, installation data=20061217 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
		Windows Internet Explorer 7 20061107.210142, installation data=20061217 (Microsoft Corporation)
			DEINSTALLATION: 
		PCTEL 2304WT V.9x MDC Modem Drivers
			DEINSTALLATION: ptuninst.exe
		Broadcom 440x Driver Installer (English) 3.16, installation data=20070502 (Broadcom)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{52504CE6-E909-4113-B232-4AFEC6543A61} /l1033 
		802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10 (English) 1.00.0000, installation data=20070422 (OEM)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{BDC88E5A-F47B-4314-AB38-994592E32C95} 
		Windows Genuine Advantage Validation Tool (KB892130), installation data=20070811 (Microsoft Corporation)
			DEINSTALLATION: 
		Security Update for Windows Media Player (KB911564), installation data=20060502 (Microsoft Corporation)
		Security Update for Windows Media Player 9 (KB911565), installation data=20060502 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
		Security Update for Windows Media Player 9 (KB917734), installation data=20060810 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
		Security Update for Windows Media Player 6.4 (KB925398), installation data=20061217 (Microsoft Corporation)
		Security Update for Windows Internet Explorer 7 (KB928090) 20070117.120000, installation data=20070328 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
		Hotfix for Windows Media Format 11 SDK (KB929399), installation data=20070328 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB929969) 20061222.120000, installation data=20070110 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB931768) 1, installation data=20070521 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB933566) 1, installation data=20070613 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
		Security Update for Windows Media Player 11 (KB936782), installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB937143) 1, installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB938127) 1, installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB938464) 1, installation data=20080911 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB939653) 1, installation data=20071011 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
		Hotfix for Windows Media Player 11 (KB939683), installation data=20070831 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB941569), installation data=20071213 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB942615) 1, installation data=20071213 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB944533) 1, installation data=20080214 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB946648) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
		Hotfix for Windows Internet Explorer 7 (KB947864) 1, installation data=20080410 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB950759) 1, installation data=20080612 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB950760) 1, installation data=20080612 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB950762) 1, installation data=20080612 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB950974) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951066) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
		Update for Windows XP (KB951072-v2) 2, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951376) 1, installation data=20080612 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951376-v2) 2, installation data=20080620 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951698) 1, installation data=20080612 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951748) 1, installation data=20080709 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
		Update for Windows XP (KB951978) 1, installation data=20080709 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
		Security Update for Windows Media Player (KB952069), installation data=20081212 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB952287) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB952954) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB953838) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB953839) 1, installation data=20080814 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
		Security Update for Windows Media Player 11 (KB954154), installation data=20080911 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB954211) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB954459) 1, installation data=20081113 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB954550-v5) 5, installation data=20090208 (Microsoft Corporation)
			DEINSTALLATION: 
		Security Update for Windows XP (KB954600) 1, installation data=20081212 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB955069) 1, installation data=20081113 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
		Update for Windows XP (KB955839) 1, installation data=20081212 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB956390) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956391) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956802) 1, installation data=20081212 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956803) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956841) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB957095) 1, installation data=20081015 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB957097) 1, installation data=20081113 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB958215) 1, installation data=20081212 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB958644) 1, installation data=20081024 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB958687) 1, installation data=20090113 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB960714) 1, installation data=20081218 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
		Security Update for Windows XP (KB960715) 1, installation data=20090211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB961118) 1, installation data=20090225 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 7 (KB961260) 1, installation data=20090211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
		Update for Windows XP (KB967715) 1, installation data=20090225 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
		Microsoft .NET Framework 1.1 Hotfix (KB928366)
			DEINSTALLATION: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
		Macromedia Shockwave Player 10.1.0.11 (Macromedia, Inc.)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
		Malwarebytes' Anti-Malware, installation data=20090214 (Malwarebytes Corporation)
			DEINSTALLATION: "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
		MATLAB R2008a 7.6 (The MathWorks, Inc.)
			DEINSTALLATION: C:\Program Files\MATLAB\R2008a\uninstall\uninstall.exe C:\Program Files\MATLAB\R2008a\
		Microsoft .NET Framework 1.1
			DEINSTALLATION: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Microsoft .NET Framework 3.5 SP1 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
		Mozilla Firefox (3.0.6) 3.0.6 (en-US) (Mozilla)
			DEINSTALLATION: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
		McAfee SecurityCenter (McAfee, Inc.)
			DEINSTALLATION: C:\Program Files\McAfee\MSC\mcuninst.exe
		Microsoft Compression Client Pack 1.0 for Windows XP 1, installation data=20061211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
		Microsoft National Language Support Downlevel APIs, installation data=20061217 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
		Shockwave Director 10.1.1
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\\INF\\swdir.inf,DefaultUninstall,5
		Macromedia Flash Player 8 9.0.124.0 (Macromedia)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
		SopCast 3.0.3 3.0.3 (SopCast.com)
			DEINSTALLATION: C:\Program Files\SopCast\uninst.exe
		VideoLAN VLC media player 0.8.6e 0.8.6e (VideoLAN Team)
			DEINSTALLATION: C:\Program Files\VideoLAN\VLC\uninstall.exe
		Windows Genuine Advantage Validation Tool (KB892130) 1.7.0069.2, installation data=20060502 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Genuine Advantage Notifications (KB905474) 1.8.0031.9, installation data=20081004 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Media Format 11 runtime
			DEINSTALLATION: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
		Windows Media Player 11
			DEINSTALLATION: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
		Windows XP Service Pack 3 20080414.031525, installation data=20080515 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
		WinRAR archiver
			DEINSTALLATION: C:\Program Files\WinRAR\uninstall.exe
		Windows Media Format 11 runtime, installation data=20061211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
		Windows Media Player 11, installation data=20061211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
		Microsoft User-Mode Driver Framework Feature Pack 1.0, installation data=20061211 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
		Microsoft Office 2000 SR-1 Premium (English) 9.00.9327, installation data=20060502 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7}
		ATI Control Panel
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
		Java(TM) 6 Update 11 (English) 6.0.110, installation data=20090222 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
		J2SE Runtime Environment 5.0 Update 6 (English) 1.5.0.60, installation data=20060502 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
		J2SE Runtime Environment 5.0 Update 9 (English) 1.5.0.90, installation data=20061116 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
		Java(TM) 6 Update 2 (English) 1.6.0.20, installation data=20070813 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
		Java(TM) 6 Update 3 (English) 1.6.0.30, installation data=20081019 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
		Java(TM) 6 Update 7 (English) 1.6.0.70, installation data=20081118 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
		WebFldrs XP (English) 9.50.7523, installation data=20070502 (Microsoft Corporation)
		MSXML 4.0 SP2 (KB927978) (English) 4.20.9841.0, installation data=20061118 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
		B44Inst (English) 3.16, installation data=20070502 (Broadcom)
		Easy CD Creator 5 Basic (English) 5.3.4.21, installation data=20060502 (Roxio Inc)
			DEINSTALLATION: MsiExec.exe /I{609F7AC8-C510-11D4-A788-009027ABA5D0}
		Apple Software Update (English) 2.1.1.116, installation data=20081012 (Apple Inc.)
			DEINSTALLATION: MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
		Microsoft Visual C++ 2005 Redistributable (English) 8.0.56336, installation data=20090128 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
		SigmaTel AC97 Audio Drivers
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7959721D-8268-4565-9E0E-C41A9F4848A9}\setup.exe" -l0x9 -nodialog -uninstall
		MSXML 4.0 SP2 (KB954430) (English) 4.20.9870.0, installation data=20081112 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
		Bonjour (English) 1.0.105, installation data=20081012 (Apple Inc.)
			DEINSTALLATION: MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
		QuickTime (English) 7.55.90.70, installation data=20081012 (Apple Inc.)
			DEINSTALLATION: MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
		Apple Mobile Device Support (English) 2.1.1.13, installation data=20081012 (Apple Inc.)
			DEINSTALLATION: MsiExec.exe /I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}
		Microsoft .NET Framework 3.0 Service Pack 2 (English) 3.2.30729, installation data=20090208 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
		Adobe Reader 7.0.9 (English) 7.0.9, installation data=20070330 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
		Adobe Reader 7.0.5 Language Support (English) 7.0.5, installation data=20060815 (Adobe Systems)
			DEINSTALLATION: MsiExec.exe /I{AC76BA86-7AD7-5464-3428-7050000000A7}
		Spybot - Search & Destroy 1.6.2, installation data=20090223 (Safer Networking Limited)
			DEINSTALLATION: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
		DivX Web Player 1.4.0 (DivX,Inc.)
			DEINSTALLATION: C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
		Netflix Movie Viewer (English) 1.2.211, installation data=20081225 (Netflix)
			DEINSTALLATION: MsiExec.exe /X{BCE72AED-3332-4863-9567-C5DCB9052CA2}
		802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10 (English) 1.00.0000, installation data=20070422 (OEM)
		MSXML 4.0 SP2 (KB936181) (English) 4.20.9848.0, installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
		Microsoft .NET Framework 2.0 Service Pack 2 (English) 2.2.30729, installation data=20090208 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
		Linksys Updater (English) 1.1.8015.381, installation data=20081019 (Linksys)
			DEINSTALLATION: MsiExec.exe /X{C15B6175-689A-4D97-A42C-7225353F60A7}
		NETGEAR 108 Mbps Wireless PC Card WG511T
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9D20484-D3CC-4CD2-B1ED-B72A9CEFD45D}\Setup.exe" -l0x9 
		Microsoft .NET Framework 1.1 (English) 1.1.4322, installation data=20070714 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Microsoft .NET Framework 3.5 SP1 (English) 3.5.30729, installation data=20090208 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
		Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) 1 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
		Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) 1 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
		Dell ResourceCD
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D78653C3-A8FF-415F-92E6-D774E634FF2D}\setup.exe" 
		Desktop Doctor (English) 2.5.5, installation data=20090307 (Comcast)
			DEINSTALLATION: MsiExec.exe /I{D87149B3-7A1D-4548-9CBF-032B791E5908}
		Ad-Aware (English) 7.1.0.7, installation data=20080725 (Lavasoft)
			DEINSTALLATION: MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  16:39, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
	system32\DRIVERS\asyncmac.sys - stopped (demand) ("c:\windows\system32\drivers\asyncmac.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  18:57, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  18:51, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
	\??\C:\ComboFix\catchme.sys - stopped (demand)
	system32\DRIVERS\CCDECODE.sys - stopped (demand) ("c:\windows\system32\drivers\ccdecode.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 17024, File modification date = 13/04/2008  18:46, File description = WDM Closed Caption VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123412182|0x0be5aef125be881c4f854c554f2b025c|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  18:44, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
	system32\drivers\ip6fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  18:53, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  18:57, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  18:54, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
	System32\Drivers\mam4410c.sys - stopped (demand) ("c:\windows\system32\drivers\mam4410c.sys") File version = 1, 1, 1, 7, File size = 24784, File modification date = 16/06/2005  22:11, File description = USB Common Control Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 7, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |-305291688|0x494daad7dab01d160c37ae7d99b00de6|
	System32\Drivers\mam4410m.sys - stopped (demand) ("c:\windows\system32\drivers\mam4410m.sys") File version = 1, 1, 1, 9, File size = 25044, File modification date = 16/06/2005  22:13, File description = USB Common Modem Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 9, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |425162036|0xb2434b4f7827798abecd2103fb8f64a5|
	System32\Drivers\mam4410u.sys - stopped (demand) ("c:\windows\system32\drivers\mam4410u.sys") File version = 1, 41, 1, 6, File size = 52309, File modification date = 19/03/2007  18:39, File description = Usb Bus Driver, Product Name = Handset Manager, Product version = 1, 41, 1, 6, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |2075266820|0x5020e06ad2c3551a1f37cf2d48ebc418|
	system32\drivers\mferkdk.sys - stopped (demand) ("c:\windows\system32\drivers\mferkdk.sys") File version = SYSCORE.14.0.0.291.x86, File size = 33832, File modification date = 22/11/2007  11:44, File description = VSCore Code Analysis Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1104730757|0xa551154b51d6a93fccf70fc4e8eaf4bd|
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  18:39, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  18:39, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  18:39, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
	system32\drivers\MSTEE.sys - stopped (demand) ("c:\windows\system32\drivers\mstee.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
	system32\DRIVERS\NABTSFEC.sys - stopped (demand) ("c:\windows\system32\drivers\nabtsfec.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 85248, File modification date = 13/04/2008  18:46, File description = WDM NABTS/FEC VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-702127793|0x5b50f1b2a2ed47d560577b221da734db|
	system32\DRIVERS\NdisIP.sys - stopped (demand) ("c:\windows\system32\drivers\ndisip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 10880, File modification date = 13/04/2008  18:46, File description = Microsoft IP Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-495085904|0x7ff1f1fd8609c149aa432f95a8163d97|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 04/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 04/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\ptserial.sys - stopped (demand) ("c:\windows\system32\drivers\ptserial.sys") File version = 2.50.47, File size = 135292, File modification date = 24/02/2003  20:30, File description = HSP Modem Serial Device Driver for NT 5.0, Product Name = HSP Modem Serial Device, Product version = 2.50.47, Company name = PCTEL, INC. (Copyright (C) PCTEL. 1994-2003) |1334016457|0x6a3fbbbba5f228b003ef64070f7b3fe4|
	system32\DRIVERS\OVCD.sys - stopped (demand) ("c:\windows\system32\drivers\ovcd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 28032, File modification date = 17/08/2001  20:05, File description = Video Minidriver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( 1996-2000 Logitech.  All rights reserved.) |-1990550668|0xfddd1aeb9f81ef1e6e48ae1edc2a97d6|
	system32\DRIVERS\wg111v2.sys - stopped (demand)
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = 4.03.086, File size = 20480, File modification date = 13/11/2007  10:25, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
	\systemroot\system32\drivers\seneka.sys (system)
	system32\DRIVERS\sis163u.sys - stopped (demand) ("c:\windows\system32\drivers\sis163u.sys") File version = 5.1.1039.1020, File size = 167424, File modification date = 31/12/2004  22:46, File description = SiS163 usb Wireless LAN Adapter Driver, Product Name = NDIS NIC Driver, Product version = 5.1.1039.1020, Company name = SiS Corporation (SiS Corporation) |1676611955|0x24c563c9ab67db0d80070c8e0945ff87|
	system32\DRIVERS\SLIP.sys - stopped (demand) ("c:\windows\system32\drivers\slip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 11136, File modification date = 13/04/2008  18:46, File description = Microsoft Slip Deframing Filter Minidriver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1964362680|0x866d538ebe33709a5c9f5c62b73b7d14|
	system32\DRIVERS\SONYPVU1.SYS - stopped (demand) ("c:\windows\system32\drivers\sonypvu1.sys") File version = 1.3.0526.0 (XPClient.010817-1148), File size = 7552, File modification date = 17/08/2001  18:56, File description = Sony USB Lower Filter driver, Product Name = Sony USB Lower Filter driver, Product version = 1.3.0526.0, Company name = Sony Corporation (Copyright 1999,2000 Sony Corporation) |740166423|0xa1eceeaa5c5e74b2499eb51d38185b84|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
	system32\DRIVERS\StreamIP.sys - stopped (demand) ("c:\windows\system32\drivers\streamip.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 15232, File modification date = 13/04/2008  18:46, File description = Microsoft IP Test Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |735896275|0x77813007ba6265c4b6098187e6ed79d2|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  18:45, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
	System32\Drivers\usbaapl.sys - stopped (demand) ("c:\windows\system32\drivers\usbaapl.sys") File version = 1, 38, 0, 0, File size = 32000, File modification date = 01/10/2008  17:01, File description = Apple Mobile Device USB Driver, Product Name = Apple Mobile Device USB Driver, Product version = 1.38.0.0, Company name = Apple, Inc. ( Apple, Inc.  All rights reserved.) |454820262|0xc1ca131f4e3ed63d6bc89a35ffad4cda|
	system32\drivers\usbaudio.sys - stopped (demand) ("c:\windows\system32\drivers\usbaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
	system32\DRIVERS\usbccgp.sys - stopped (demand) ("c:\windows\system32\drivers\usbccgp.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 32128, File modification date = 13/04/2008  18:45, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1127277154|0x173f317ce0db8e21322e71b7e60a27e8|
	system32\DRIVERS\usbscan.sys - stopped (demand) ("c:\windows\system32\drivers\usbscan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  18:45, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
	system32\DRIVERS\USBSTOR.SYS - stopped (demand) ("c:\windows\system32\drivers\usbstor.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  18:45, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
	system32\DRIVERS\VX1000.sys - stopped (demand) ("c:\windows\system32\drivers\vx1000.sys") File version = 1, 3, 4, 6, File size = 1966312, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam VX1000 Device Driver, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |-250602167|0xf4fab0b9d43a65f79fc838c94006f643|
	system32\DRIVERS\wceusbsh.sys - stopped (system) ("c:\windows\system32\drivers\wceusbsh.sys") File version = 1.02.102300.0 (xpsp.080413-2108), File size = 31744, File modification date = 13/04/2008  18:45, File description = Windows CE USB Serial Host, Product Name = Windows CE USB Serial Host Driver, Product version = 1.02.102300.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |509860699|0x4c0b8ef721783f52f8e531fbdc4b1f74|
	system32\DRIVERS\WSTCODEC.SYS - stopped (demand) ("c:\windows\system32\drivers\wstcodec.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 19200, File modification date = 13/04/2008  18:46, File description = WDM WST Codec Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation (Copyright (C) Philips Semiconductors. 1981-1999) |-991709184|0xc98b39829c2bbd34e454150633c62c78|
	system32\DRIVERS\WudfPf.sys - stopped (demand) ("c:\windows\system32\drivers\wudfpf.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 29/09/2006  00:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
	system32\DRIVERS\wudfrd.sys - stopped (demand) ("c:\windows\system32\drivers\wudfrd.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 29/09/2006  01:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
	\WINDOWS\system32\ntoskrnl.exe ("c:\windows\system32\ntoskrnl.exe") File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 2189184, File modification date = 14/08/2008  10:11, File description = NT Kernel & System, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-935615778|0xeeaf32f8e15a24f62becb1bd403bb5c5|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 81152, File modification date = 13/04/2008  18:31, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979654071|0xc4ba879b581be34536fe01f79ac28631|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 04/08/2004  12:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 04/08/2004  12:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  18:36, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
	\WINDOWS\system32\DRIVERS\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 04/08/2004  12:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  18:36, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  18:36, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
	ohci1394.sys ("c:\windows\system32\drivers\ohci1394.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 61696, File modification date = 13/04/2008  18:46, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1583879848|0xca33832df41afb202ee7aeb05145922f|
	\WINDOWS\system32\DRIVERS\1394BUS.SYS ("c:\windows\system32\drivers\1394bus.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 53376, File modification date = 13/04/2008  18:46, File description = 1394 Bus Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1319771909|0xc1536905ad2067812a238bce998f4bff|
	compbatt.sys ("c:\windows\system32\drivers\compbatt.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 10240, File modification date = 13/04/2008  18:36, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1770663233|0x6e4c9f21f0fae8940661144f41b13203|
	\WINDOWS\system32\DRIVERS\BATTC.SYS ("c:\windows\system32\drivers\battc.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14208, File modification date = 13/04/2008  18:36, File description = Battery Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-919502252|0x0d93976f7801b7fcd8135cc77257bbd0|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  18:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24960, File modification date = 13/04/2008  18:40, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2111945760|0x52e60f29221d0d1ac16737e8dbf7c3e9|
	intelide.sys ("c:\windows\system32\drivers\intelide.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:40, File description = Intel PCI IDE Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-926823474|0xb5466a9250342a7aa0cd1fba13420678|
	pcmcia.sys ("c:\windows\system32\drivers\pcmcia.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 120192, File modification date = 13/04/2008  18:36, File description = PCMCIA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34174239|0x9e89ef60e9ee05e3f2eef2da7397f1c1|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42368, File modification date = 13/04/2008  18:39, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |946723267|0xa80b9a0bad1b73637dbcbba7df72d3fd|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 04/08/2004  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
	dmload.sys ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 04/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	dmio.sys ("c:\windows\system32\drivers\dmio.sys") File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  18:44, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 19712, File modification date = 13/04/2008  18:40, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1551811490|0xbeb3ba25197665d82ec7065b724171c6|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52352, File modification date = 13/04/2008  18:41, File description = Volume Shadow Copy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2146132966|0x4c8fcb5cc53aab716d810740fe59d025|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  18:40, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  18:40, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 49536, File modification date = 13/04/2008  19:16, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34227393|0xfe47dd8fe6d7768ff94ebec6c74b2719|
	fltmgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  18:32, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
	sr.sys ("c:\windows\system32\drivers\sr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  18:36, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92288, File modification date = 13/04/2008  18:31, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1627711692|0x1705745d900dabf2d89f90ebaddc7517|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 574976, File modification date = 13/04/2008  19:15, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2068797709|0x78a08dd6a8d65e697c18e1db01c5cdca|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 182656, File modification date = 13/04/2008  19:20, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1684897513|0x1df7f42665c94b825322fae71721130d|
	vvoice.sys ("c:\windows\system32\drivers\vvoice.sys") File version = 3.53.00, File size = 66111, File modification date = 28/05/2003  17:08, File description = HSP Modem device driver, Product Name = PCTEL HSP Modem Voice Device, Product version = 3.53.00, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-1998) |-1457973619|0xdb18922f81e90d95e69f45ab8e9fc5c1|
	vpctcom.sys ("c:\windows\system32\drivers\vpctcom.sys") File version = 2.50-9K, File size = 477403, File modification date = 30/05/2003  23:45, File description = HSP Modem Virtual Control Device, Product Name = HSP Modem Virtual Control Device, Product version = 2.50-9K, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-2000) |1122360456|0x081bc31edda73d40defd347e580f9144|
	vmodem.sys ("c:\windows\system32\drivers\vmodem.sys") File version = 2.50.50, File size = 690973, File modification date = 30/05/2003  22:50, File description = HSP Modem Modem Device Driver, Product Name = HSP Modem Modem Device, Product version = 2.50.50, Company name = PCTEL, INC. (Copyright PCtel, Inc.1994-2003) |-189503282|0x09c2fcd4e379e6ab804a58caa2a3508b|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 105344, File modification date = 13/04/2008  19:17, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1122536307|0x2f625d11385b1a94360bfc70aaefdee1|
	agp440.sys ("c:\windows\system32\drivers\agp440.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 42368, File modification date = 13/04/2008  18:36, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-811459149|0x08fd04aa961bdc77fb983f328334e3d7|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  18:31, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
	\SystemRoot\system32\DRIVERS\CmBatt.sys ("C:\WINDOWS\system32\drivers\cmbatt.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 13952, File modification date = 13/04/2008  18:36, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1342912205|0x0f6c187d38d98f8df904589a5f94d411|
	\SystemRoot\system32\DRIVERS\ati2mtag.sys ("C:\WINDOWS\system32\drivers\ati2mtag.sys") File version = 6.13.10.6230, File size = 539392, File modification date = 08/11/2002  03:31, File description = ATI Radeon Miniport Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |3912840|0xb4991feb456ea3dab743bce85a5303eb|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 81664, File modification date = 13/04/2008  18:44, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1873544039|0xe28726b72c46821a28830e077d39a55b|
	\SystemRoot\system32\DRIVERS\usbuhci.sys ("C:\WINDOWS\system32\drivers\usbuhci.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  18:45, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 143872, File modification date = 13/04/2008  18:45, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929906986|0x791912e524cc2cc6f50b5f2b52d1eb71|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  18:45, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
	\SystemRoot\system32\DRIVERS\bcm4sbxp.sys ("C:\WINDOWS\system32\drivers\bcm4sbxp.sys") File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|
	\SystemRoot\system32\DRIVERS\wg511nd5.sys ("C:\WINDOWS\system32\drivers\wg511nd5.sys") File version = 4.0.0.140, File size = 449888, File modification date = 25/07/2005  22:48, File description = Driver for Atheros AR5001 Wireless Network Adapter, Product Name = Atheros AR5001 Wireless Network Adapter, Product version = 4.0.0.140, Company name = Atheros Communications, Inc. (2001-2004 Atheros Communications, Inc. All Rights Reserved.) |-2056780248|0x8a91fd656d0832195eafb6cb45b06c27|
	\SystemRoot\system32\DRIVERS\nic1394.sys ("c:\windows\system32\drivers\nic1394.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61824, File modification date = 13/04/2008  18:51, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-664318305|0xe9e47cfb2d461fa0fc75b7a74c6383ea|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:18, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 13/04/2008  18:39, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  18:39, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
	\SystemRoot\system32\DRIVERS\imapi.sys ("C:\WINDOWS\system32\drivers\imapi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  18:40, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  18:40, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 13/04/2008  18:40, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
	\SystemRoot\system32\DRIVERS\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 141056, File modification date = 13/04/2008  19:16, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2048087826|0x0753515f78df7f271a5e61c20bcd36a1|
	\SystemRoot\system32\drivers\STAC97.sys ("C:\WINDOWS\system32\drivers\stac97.sys") File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 146048, File modification date = 13/04/2008  19:19, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1339121702|0xe82a496c3961efc6828b508c310ce98f|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60160, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1772042113|0x6cb08593487f5701d2d2254e693eafce|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:19, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  18:57, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:20, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  18:57, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:19, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
	\SystemRoot\system32\DRIVERS\TDI.SYS ("C:\WINDOWS\system32\drivers\tdi.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19072, File modification date = 13/04/2008  19:00, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |501454851|0x0539d5e53587f82d1b4fd74c5be205cf|
	\SystemRoot\system32\DRIVERS\psched.sys ("C:\WINDOWS\system32\drivers\psched.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  18:56, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  18:56, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 04/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 04/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\rdpdr.sys ("C:\WINDOWS\system32\drivers\rdpdr.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  18:32, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:13, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 13/04/2008  18:39, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  18:39, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 13/04/2008  18:36, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40576, File modification date = 13/04/2008  18:57, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-204520038|0x6215023940cfd3702b46abc304e1d45a|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  18:45, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 04/08/2004  12:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\System32\Drivers\Cdr4_xp.SYS ("C:\WINDOWS\system32\drivers\cdr4_xp.sys") File version = 5.3.4.21, File size = 61424, File modification date = 17/12/2002  17:32, File description = CDR4_XP CDR Helper, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |-431667864|0x297acc7d7c66ec86ee0b4eb5af9a8fd3|
	\SystemRoot\System32\Drivers\Cdralw2k.SYS ("C:\WINDOWS\system32\drivers\cdralw2k.sys") File version = 5.3.4.21, File size = 23436, File modification date = 17/12/2002  17:32, File description = CDRAL for Windows 2000 Kernel Driver, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |487512882|0x5e31abf467a6fd857710c0927c88ee4c|
	\SystemRoot\System32\Drivers\pwd_2k.SYS ("C:\WINDOWS\system32\drivers\pwd_2k.sys") File version = 5.3.4.59, File size = 143834, File modification date = 02/05/2006  19:28, File description = Win2000 Framework for Packet Write Driver, Product Name = DirectCD, Product version = 5.3.4.59, Company name = Roxio (Copyright (c) 2001-2003, Roxio, Inc.) |927235550|0xd8b90616a8bd53de281dbdb664c0984a|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 04/08/2004  12:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 04/08/2004  12:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  18:44, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
	\SystemRoot\System32\Drivers\mnmdd.SYS ("C:\WINDOWS\system32\drivers\mnmdd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = Frame buffer simulator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1594636198|0x4ae068242760a1fb6e1a44bf4e16afa6|
	\SystemRoot\System32\DRIVERS\RDPCDD.sys ("C:\WINDOWS\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\SystemRoot\System32\Drivers\cdudf_xp.SYS ("C:\WINDOWS\system32\drivers\cdudf_xp.sys") File version = 5.3.4.21 built by: WinDDK, File size = 241152, File modification date = 17/12/2002  17:27, File description = CD-UDF NT Filesystem Driver, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |1551241963|0xcfd81f2140193fc7f1812e6d6eaf6795|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 19072, File modification date = 13/04/2008  18:32, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2138279264|0xc941ea2454ba8350021d774daf0f1027|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 30848, File modification date = 13/04/2008  18:32, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1513111447|0x3182d64ae053d6fb034f44b6def8034a|
	\SystemRoot\System32\Drivers\UdfReadr_xp.SYS ("C:\WINDOWS\system32\drivers\udfreadr_xp.sys") File version = 5.3.4.60 built by: WinDDK, File size = 206464, File modification date = 02/05/2006  19:28, File description = CD-UDF NT Filesystem Reader Driver, Product Name = DirectCD, Product version = 5.3.4.60, Company name = Roxio (Copyright (c) 2001-2003, Roxio, Inc.) |-838743603|0x4e75005b74be901c30f2636df40b0c15|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 04/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:19, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 20/06/2008  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-946646010|0x9aefa14bd6b182d61e3119fa5f436d3d|
	\SystemRoot\System32\Drivers\Mpfp.sys ("C:\WINDOWS\system32\drivers\mpfp.sys") File version = 9.0.114.0, File size = 113952, File modification date = 13/07/2007  11:20, File description = McAfee Personal Firewall Plus Driver, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.114.0, Company name = McAfee, Inc. (Copyright (c) 2007 McAfee, Inc. All rights reserved.) |2104134654|0xe454f42ae5524d695d76eab5d363b8ac|
	\SystemRoot\system32\DRIVERS\ipfltdrv.sys ("C:\WINDOWS\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 04/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	\SystemRoot\system32\DRIVERS\netbt.sys ("C:\WINDOWS\system32\drivers\netbt.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:21, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  18:56, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:28, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
	\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS ("C:\WINDOWS\system32\drivers\omci.sys") File version = 6, 1, 0, 242, File size = 13632, File modification date = 22/08/2001  13:42, File description = OMCI Device Driver, Product Name = OMCI Driver, Product version = 6, 1, 0, 242, Company name = Dell Computer Corporation (Copyright  Dell Computer Corp. 2000) |924069296|0xcec7e2c6c1fa00c7ab2f5434f848ae51|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
	\SystemRoot\system32\drivers\mfehidk.sys ("C:\WINDOWS\system32\drivers\mfehidk.sys") File version = SYSCORE.14.0.0.291.x86, File size = 201320, File modification date = 22/11/2007  11:44, File description = Host Intrusion Detection Link Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1081701495|0x6c9a6ed60b8fc3baf72fe1b1d096445b|
	\SystemRoot\system32\DRIVERS\ipnat.sys ("C:\WINDOWS\system32\drivers\ipnat.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  18:57, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 44544, File modification date = 13/04/2008  18:33, File description = FIPS Crypto Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1912005625|0xd45926117eb9fa946a6af572fbe1caa3|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  18:57, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
	\SystemRoot\system32\DRIVERS\arp1394.sys ("C:\WINDOWS\system32\drivers\arp1394.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 60800, File modification date = 13/04/2008  18:51, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |289852718|0xb5b8a80875c1dededa8b02765642c32f|
	\??\C:\WINDOWS\system32\drivers\fanio.sys ("\\?\c:\windows\system32\drivers\fanio.sys") File version = 2.2, File size = 20480, File modification date = 21/10/2006  21:26, File description = I8k Fan I/O, Product Name = fanio.sys, Product version = 2.2, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |383413257|0x8b5c73dfb031d5d5112cd7be5b0f85ad|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 63744, File modification date = 13/04/2008  19:14, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-798199484|0xc885b02847f5d2fd45a24e219ed93b32|
	\SystemRoot\System32\Drivers\dump_atapi.sys
	\SystemRoot\System32\Drivers\dump_WMILIB.SYS
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.5676 (xpsp_sp3_gdr.080915-1443), File size = 1846400, File modification date = 15/09/2008  12:12, File description = Multi-User Win32 Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5676, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1497907739|0xd21a189185d3a74512cc8e68f16e3fcf|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 04/08/2004  12:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 17664, File modification date = 13/04/2008  18:44, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1513891853|0x9a10aacbfdc4922715375fb4065ec930|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 71168, File modification date = 13/04/2008  18:38, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1008970732|0xac7280566a7bb85cb3291f04ddc1198e|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 04/08/2004  12:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\ati2dvag.dll ("C:\WINDOWS\system32\ati2dvag.dll") File version = 6.13.10.6230, File size = 241536, File modification date = 08/11/2002  03:32, File description = ATI Radeon WindowsNT Display Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |1425560238|0xaebe4a2e7f6b967ece2445b6b62694de|
	\SystemRoot\System32\ati3d1ag.dll ("C:\WINDOWS\system32\ati3d1ag.dll") File version = 6.13.10.3545, File size = 831227, File modification date = 08/11/2002  02:52, File description = ati3d1ag.dll, Product Name = ATI Technologies Inc. Radeon DirectX Universal Driver, Product version = 6.13.10.3545, Company name = ATI Technologies Inc.  (Copyright (C) 1998-2002 ATI Technologies Inc.) |-735598595|0x8a17c244568988a7ac17dd13c0ac9684|
	\SystemRoot\System32\ATMFD.DLL ("C:\WINDOWS\system32\atmfd.dll") File version = 5.1 Build 226, File size = 285696, File modification date = 14/04/2008  00:09, File description = Windows NT OpenType/Type 1 Font Driver, Product Name = Adobe Type Manager, Product version = 5.1 Build 226, Company name = Adobe Systems Incorporated (1983-1990, 1993-2004 Adobe Systems Inc.) |834643080|0x34ef4739a4d9d09a96069198f42b8d99|
	\SystemRoot\system32\DRIVERS\AegisP.sys ("C:\WINDOWS\system32\drivers\aegisp.sys") File version = 3.2.0.3, File size = 17801, File modification date = 09/02/2008  00:42, File description = IEEE 802.1X Protocol Driver, Product Name = AEGIS Client 3.2.0.3, Product version = 3.2.0.3, Company name = Meetinghouse Data Communications (Copyright (C) Meetinghouse Data Communications 1997-2004) |1913693436|0x2c5c22990156a1063e19ad162191dc1d|
	\SystemRoot\system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 13/04/2008  18:55, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  18:32, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
	\SystemRoot\system32\DRIVERS\MaVc2K.sys ("C:\WINDOWS\system32\drivers\mavc2k.sys") File version = 1, 1, 2, 2, File size = 11986, File modification date = 16/01/2007  15:44, File description = Mobile Action Virtual Control, Product Name = Handset Manager, Product version = 1, 1, 2, 2, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All rights reserved.) |-1584420214|0x8181ceb341cbb2f7f893f85b915d5e15|
	\SystemRoot\System32\Drivers\Aspi32.SYS ("C:\WINDOWS\system32\drivers\aspi32.sys") File version = 4.57 (1008), File size = 23936, File modification date = 23/12/1997  01:02, File description = ASPI for WIN32 Kernel Driver, Product Name = Adaptec's ASPI Layer, Product version = 4.57 (1008), Company name = Adaptec (Copyright  1989-1997 Adaptec, Inc.) |-298429385|0x20d04091eba710f6988f710507d85868|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
	\SystemRoot\system32\drivers\mfebopk.sys ("C:\WINDOWS\system32\drivers\mfebopk.sys") File version = SYSCORE.14.0.0.291.x86, File size = 35240, File modification date = 22/11/2007  11:44, File description = Buffer Overflow Protection Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1961186230|0x5447338b83a1a2354fb2fea7604387fd|
	\SystemRoot\system32\drivers\mfeavfk.sys ("C:\WINDOWS\system32\drivers\mfeavfk.sys") File version = SYSCORE.14.0.0.291.x86, File size = 79304, File modification date = 22/11/2007  11:44, File description = Anti-Virus File System Filter Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1807686372|0xc97cbfd71c1c215150a3b3e55f77a7a3|
	\??\C:\WINDOWS\system32\AWINDIS5.SYS ("\\?\c:\windows\system32\awindis5.sys") File version = 5.00.13.50, File size = 16194, File modification date = 11/04/2002  23:43, File description = AWINDIS NDIS 5.0 Protocol Driver, Product Name = AMBIT WinDis32 Protocol Driver for Windows, Product version = 5.00.13.50, Company name = AMBIT Microsystems Corporation. (Copyright ) |-582550093|0xf62b70d3209e38a6c19a03109a25b903|
	\SystemRoot\System32\Drivers\HTTP.sys ("C:\WINDOWS\system32\drivers\http.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  18:53, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
	\SystemRoot\system32\drivers\mfesmfk.sys ("C:\WINDOWS\system32\drivers\mfesmfk.sys") File version = SYSCORE.14.0.0.284.x86, File size = 40488, File modification date = 02/12/2007  17:51, File description = System Monitor Filter Driver, Product Name = SYSCORE.14.0.0.284.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |627931775|0x299a86b780c9627aaa24e74292363ed2|
	\SystemRoot\system32\DRIVERS\hidusb.sys ("C:\WINDOWS\system32\drivers\hidusb.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 10368, File modification date = 13/04/2008  18:45, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738735441|0xccf82c5ec8a7326c3066de870c06daf1|
	\SystemRoot\system32\DRIVERS\HIDCLASS.SYS ("C:\WINDOWS\system32\drivers\hidclass.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36864, File modification date = 13/04/2008  18:45, File description = Hid Class Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1116251609|0x1af592532532a402ed7c060f6954004f|
	\SystemRoot\system32\DRIVERS\HIDPARSE.SYS ("C:\WINDOWS\system32\drivers\hidparse.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24960, File modification date = 13/04/2008  18:45, File description = Hid Parsing Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-948958433|0x96eccf28fdbf1b2cc12725818a63628d|
	\SystemRoot\system32\DRIVERS\mouhid.sys ("C:\WINDOWS\system32\drivers\mouhid.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 17/08/2001  18:48, File description = HID Mouse Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273853103|0xb1c303e17fb9d46e87a98e4ba6769685|
	\SystemRoot\system32\drivers\kmixer.sys ("C:\WINDOWS\system32\drivers\kmixer.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  18:45, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 680, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 50688, File modification date = 14/04/2008  00:12, File description = Windows NT Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1435690640|0x5f816c1f539266d2d4c78694239da0b5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|

	PROCESS	csrss, PID = 744, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 6144, File modification date = 14/04/2008  00:12, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |257561549|0x44f275c64738ea2056e3d9580c23b60f|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 52736, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |889374799|0x42f1f4c0afb08410e5f02d4b13ebb623|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 6144, File modification date = 14/04/2008  00:12, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |257561549|0x44f275c64738ea2056e3d9580c23b60f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b40000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 32256, File modification date = 14/04/2008  00:11, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938077962|0x05b100f8dd7073bfd7b3e46d0e36ad0c|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b50000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 52736, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |889374799|0x42f1f4c0afb08410e5f02d4b13ebb623|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b60000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 293376, File modification date = 14/04/2008  00:12, File description = Windows Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2036522752|0x1618f36d4f7f6ccceb3ee44ba95be85c|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\sxs.dll, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|

	PROCESS	winlogon, PID = 768, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 507904, File modification date = 14/04/2008  00:12, File description = Windows NT Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1219746257|0xed0ef0a136dec83df69f04118870003e|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 507904, File modification date = 14/04/2008  00:12, File description = Windows NT Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1219746257|0xed0ef0a136dec83df69f04118870003e|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75940000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 17920, File modification date = 14/04/2008  00:12, File description = Network DDE Share Management APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123978768|0x013c1148c1ec025596896e093f60f608|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75930000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 27648, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027689378|0xfcfa1c55971cc229d353b3a15accd995|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76bc0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 49664, File modification date = 14/04/2008  00:12, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093570802|0xaf11c591f2f4aff4a6cf699d376f618b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75970000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 997376, File modification date = 14/04/2008  00:11, File description = Windows NT Logon GINA DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |609505261|0xd7b7a57c0e57c836f18cf12a4c62a1ca|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 74320000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1657068939|0x52a5a388661ff3a889593185367b7226|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\odbcint.dll, MID = 930000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 94208, File modification date = 13/04/2008  17:26, File description = Microsoft Data Access - ODBC Resources, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1903028116|0x6b7c6b32f8e84d56c6260d684019fea2|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776e0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
	  C:\WINDOWS\system32\sfc.dll, MID = 76bb0000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 5120, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1348001263|0x96e1c926f22ee1bfbae82901a35f6bf3|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723d0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 99328, File modification date = 14/04/2008  00:12, File description = Microsoft Smart Card API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1234730488|0x02988b904c386b500cd08639c4c20eea|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\sxs.dll, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\cscdll.dll, MID = 76600000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:11, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
	  C:\WINDOWS\System32\dimsntfy.dll, MID = 47020000,  ("c:\windows\system32\dimsntfy.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 19456, File modification date = 14/04/2008  00:11, File description = DIMS Notification Handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-96338696|0xe2092f0a1d7abc243f9c2362483d150d|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75950000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\WgaLogon.dll, MID = 1390000,  ("c:\windows\system32\wgalogon.dll") File version = 1.8.0031.9, File size = 241704, File modification date = 06/09/2008  03:30, File description = Windows Genuine Advantage Notifications, Product Name = Microsoft Genuine Advantage, Product version = 1.8.0031.9, Company name = Microsoft Corporation ( 1995-2008 Microsoft Corporation) |-19035101|0x8e7dddcc5a262480e7a8342956732bd9|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a20000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:11, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1610000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72d20000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72d10000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 04/08/2004  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bd0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:11, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|

	PROCESS	services, PID = 812, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5f770000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 14/04/2008  00:12, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1352312310|0xec29a79f1e76dc509e24d401f29d0678|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 7dbd0000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 314880, File modification date = 14/04/2008  00:12, File description = Windows Security Configuration Editor Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1325096785|0xb24a42a413e694ad73fdfb7fbd492c31|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 123392, File modification date = 14/04/2008  00:12, File description = User-mode Plug-and-Play Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |179157249|0x2edfc2a8893435723ad80481803c6d5c|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcAdProc.dll, MID = 47260000,  ("c:\windows\apppatch\acadproc.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39424, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1840758300|0xea9ee60b408878e5f2012f9c783836db|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\eventlog.dll, MID = 77b70000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 56320, File modification date = 14/04/2008  00:11, File description = Event Logging Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1481283099|0x6d4feb43ee538fc5428cc7f0565aa656|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|

	PROCESS	lsass, PID = 824, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75730000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 728064, File modification date = 14/04/2008  00:11, File description = LSA Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578903097|0xea9aaa0b9bbf9b24fd3caecc7fd69a1e|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:12, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74440000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 415744, File modification date = 14/04/2008  00:12, File description = SAM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1571439755|0xf05b8cdb7fe0e55dccfb1d946ce80064|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76790000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33280, File modification date = 14/04/2008  00:11, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363977478|0x17a1d675c12bbf80caac54a4855c41d0|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\msprivs.dll, MID = 4d200000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 48128, File modification date = 13/04/2008  16:23, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |97889384|0xc6bb1d1500db4a0e224cb65e6c7e8a80|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cf0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 299520, File modification date = 14/04/2008  00:11, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-612695399|0xb17defd576ae373e7a1a2c75665e4549|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\netlogon.dll, MID = 744b0000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 407040, File modification date = 14/04/2008  00:12, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-497788752|0x1b7f071c51b77c272875c3a23e1e4550|
	  C:\WINDOWS\system32\w32time.dll, MID = 767c0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:12, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\schannel.dll, MID = 767f0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 144384, File modification date = 14/04/2008  00:12, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1733547828|0xc61e8ecffdbf05ff71d079bbd35396b3|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\wdigest.dll, MID = 74380000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 49152, File modification date = 14/04/2008  00:12, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-182244580|0xcefcc6a64983eb8119f3a07a0c1ede30|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\scecli.dll, MID = 74410000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 181248, File modification date = 14/04/2008  00:12, File description = Windows Security Configuration Editor Client Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1916274224|0xa86bb5e61bf3e39b62ab4c7e7085a084|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743e0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 183808, File modification date = 14/04/2008  00:11, File description = Windows IPSec SPD Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |272523589|0x332760fba1655fcfd35bd6f4fd871300|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75d90000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 270336, File modification date = 14/04/2008  00:12, File description = Oakley Key Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1032466659|0x33ceb89b62589e8b12aee9e2d523dade|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74370000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 32256, File modification date = 14/04/2008  00:12, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1414615888|0x248712ea6ba17b9ff0c542a3828375dd|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 138752, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1930455596|0xfede68bf80052bad393afd5c2e60dcb0|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 743a0000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 34304, File modification date = 14/04/2008  00:12, File description = Protected storage server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1256118844|0x853d0d0c6f02d7bfdf1cf99dd7553732|
	  C:\WINDOWS\system32\psbase.dll, MID = 743c0000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:12, File description = Protected Storage default provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1561976406|0x22d89d84e8e081cda529dbf8c0255a38|

	PROCESS	svchost, PID = 988, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  c:\windows\system32\rpcss.dll, MID = 76a80000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 670000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  c:\windows\system32\termsrv.dll, MID = 760f0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:12, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
	  c:\windows\system32\ICAAPI.dll, MID = 74f70000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 11264, File modification date = 14/04/2008  00:11, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1148796443|0xdf6551e4c4c46655a0c76194f1fcea5d|
	  c:\windows\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  c:\windows\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  c:\windows\system32\mstlsapi.dll, MID = 75110000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 116224, File modification date = 14/04/2008  00:12, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |374101092|0x2d65d56c2f8b6cc5ebff8e7200c30304|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:11, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  c:\windows\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:11, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  c:\windows\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76bc0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 49664, File modification date = 14/04/2008  00:12, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093570802|0xaf11c591f2f4aff4a6cf699d376f618b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|

	PROCESS	svchost, PID = 1056, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\rpcss.dll, MID = 76a80000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 670000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\Program Files\Bonjour\mdnsNSP.dll, MID = 16080000,  ("c:\program files\bonjour\mdnsnsp.dll") File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|

	PROCESS	svchost, PID = 1092, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 630000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\shsvcs.dll, MID = 776e0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  c:\windows\system32\dhcpcsvc.dll, MID = 7d4b0000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
	  c:\windows\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\System32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  c:\windows\system32\wzcsvc.dll, MID = 7db10000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
	  c:\windows\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  c:\windows\system32\WMI.dll, MID = 76d30000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 5632, File modification date = 14/04/2008  00:11, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-719986125|0x7b0770526801f05d58c51a3dfb87b4bd|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  c:\windows\system32\EapolQec.dll, MID = 72810000,  ("c:\windows\system32\eapolqec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 30720, File modification date = 14/04/2008  00:11, File description = Microsoft EAPOL NAP Enforcement Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1377493183|0xe6ef7bc927d9f8f9ba1584bfc39e0c6f|
	  c:\windows\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  c:\windows\system32\QUtil.dll, MID = 726c0000,  ("c:\windows\system32\qutil.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 76800, File modification date = 14/04/2008  00:12, File description = Quarantine Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1351838941|0x8ae93aacc648921baacb8602991ac4b3|
	  c:\windows\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  c:\windows\system32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:11, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  c:\windows\system32\ESENT.dll, MID = 606b0000,  ("c:\windows\system32\esent.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 1082368, File modification date = 14/04/2008  00:11, File description = Server Database Storage Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1441214508|0xf5b754cdea20bbb3a31e16a776ede6d6|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\WZCSAPI.DLL, MID = 73030000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 52736, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1800689210|0x767ff54a552732ce772c2302025fa82f|
	  C:\WINDOWS\System32\rastls.dll, MID = 76b70000,  ("c:\windows\system32\rastls.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 150016, File modification date = 14/04/2008  00:12, File description = Remote Access PPP EAP-TLS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |683497955|0x036d3962f2086bf2a98e2873ce153828|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 754d0000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 512512, File modification date = 14/04/2008  00:11, File description = Microsoft Trust UI Provider, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2087176561|0x6e4be11d50f8a8de2bad644c9c9de8d3|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 14a0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\System32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:11, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  C:\WINDOWS\System32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:11, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  C:\WINDOWS\System32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:11, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  C:\WINDOWS\System32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\System32\RASAPI32.dll, MID = 76ee0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 237056, File modification date = 14/04/2008  00:12, File description = Remote Access API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1996513756|0x92c4f48b62b0b876194584c3ff09ccb6|
	  C:\WINDOWS\System32\rasman.dll, MID = 76e90000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |402120582|0x4def926f6a0545ae486a03c84f2ee482|
	  C:\WINDOWS\System32\TAPI32.dll, MID = 76eb0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 181760, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-741300903|0x00aabf131b4823785818db99a075a313|
	  C:\WINDOWS\System32\SCHANNEL.dll, MID = 767f0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 144384, File modification date = 14/04/2008  00:12, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1733547828|0xc61e8ecffdbf05ff71d079bbd35396b3|
	  C:\WINDOWS\System32\WinSCard.dll, MID = 723d0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 99328, File modification date = 14/04/2008  00:12, File description = Microsoft Smart Card API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1234730488|0x02988b904c386b500cd08639c4c20eea|
	  C:\WINDOWS\System32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\System32\raschap.dll, MID = 76bd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 79872, File modification date = 14/04/2008  00:12, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369945370|0xed43f00cd77e72483a8625ac4f32d8d8|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  c:\windows\system32\schedsvc.dll, MID = 77300000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:12, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
	  c:\windows\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:12, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f50000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 6656, File modification date = 14/04/2008  00:11, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-206752993|0xe47e364c96467fd54fa44d59f927c3ab|
	  c:\windows\system32\audiosrv.dll, MID = 708b0000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:11, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
	  c:\windows\system32\wkssvc.dll, MID = 76e40000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132096, File modification date = 14/04/2008  00:12, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |246607633|0x1b67b632786fef1c1bbaef46c2f3f2e6|
	  c:\windows\system32\cryptsvc.dll, MID = 76ce0000,  ("c:\windows\system32\cryptsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
	  c:\windows\system32\certcli.dll, MID = 77b90000,  ("c:\windows\system32\certcli.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 194560, File modification date = 14/04/2008  00:11, File description = Microsoft Certificate Services Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |918846200|0x00709952d444eae14dbbd30d36fbae0f|
	  c:\windows\system32\dmserver.dll, MID = 74f90000,  ("c:\windows\system32\dmserver.dll") File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:11, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
	  c:\windows\system32\ersvc.dll, MID = 74f80000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:11, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
	  c:\windows\system32\es.dll, MID = 77710000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f40000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:12, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
	  c:\windows\system32\srvsvc.dll, MID = 75090000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:12, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
	  C:\WINDOWS\System32\HNETCFG.DLL, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  c:\windows\system32\netman.dll, MID = 77d00000,  ("c:\windows\system32\netman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:12, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
	  c:\windows\system32\netshell.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  c:\windows\system32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:11, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  c:\windows\system32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:11, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  c:\windows\system32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:12, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  c:\windows\system32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  c:\windows\system32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|
	  c:\windows\system32\seclogon.dll, MID = 73d20000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:12, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
	  c:\windows\system32\sens.dll, MID = 722d0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:12, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
	  C:\WINDOWS\System32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\windows\system32\srsvc.dll, MID = 751a0000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:12, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
	  c:\windows\system32\POWRPROF.dll, MID = 74ad0000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 17408, File modification date = 14/04/2008  00:12, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662701231|0x50a166237a0fa771261275a405646cc0|
	  c:\windows\system32\trkwks.dll, MID = 75070000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:12, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
	  c:\windows\system32\w32time.dll, MID = 767c0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:12, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 59490000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753e0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 430592, File modification date = 14/04/2008  00:12, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493584733|0xacacb8b14e66109b8acd6644b5574b9a|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:12, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 1809944, File modification date = 16/10/2008  19:13, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738765924|0x84a03bfe004b06e93408618976dc9c14|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\System32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75150000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 60416, File modification date = 14/04/2008  00:11, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1315966031|0xf9d3c78cfe15271d80790677c893ce45|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 600a0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 29696, File modification date = 14/04/2008  00:12, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1268464976|0xb85e95679b5adc12311bcd3f5385d623|
	  c:\windows\system32\browser.dll, MID = 76da0000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:11, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
	  c:\windows\system32\ipnathlp.dll, MID = 66460000,  ("c:\windows\system32\ipnathlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:11, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
	  c:\windows\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\System32\sfc.dll, MID = 76bb0000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 5120, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1348001263|0x96e1c926f22ee1bfbae82901a35f6bf3|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 76620000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.702, File size = 1267200, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-1401764672|0xed0c0df222209e43ad9afbf3fe87dde0|
	  C:\WINDOWS\system32\colbact.DLL, MID = 75130000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.700, File size = 60416, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |337038552|0x690d97864735e8ecd87f55777e266690|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750f0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.700, File size = 66560, File modification date = 14/04/2008  00:12, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-1439423971|0x72cd04a8789befab99f06658a41d10c9|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d10000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 58368, File modification date = 14/04/2008  00:11, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1710517156|0xdf82e222578dbe59fcbbd69a02e4c806|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 750b0000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 58880, File modification date = 14/04/2008  00:12, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1768974486|0xf51ebb6fc536a6b2d588fd668d3a8249|
	  c:\windows\system32\wscsvc.dll, MID = 4c0a0000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
	  c:\windows\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75290000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 214528, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025270981|0xd95c71052e5ef63b55997fb31483d02f|
	  C:\WINDOWS\system32\wbem\wbemcore.dll, MID = 762c0000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 531456, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1304806609|0xf0bf811622f2dd6c8e26ee4600d83731|
	  C:\WINDOWS\system32\wbem\esscli.dll, MID = 75310000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 247808, File modification date = 14/04/2008  00:11, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-247386360|0xe4616430709f440cf1809d88dc2366ea|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75690000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 472064, File modification date = 14/04/2008  00:11, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-572631280|0x60027bea3e76d7dd8d96c02432bfde82|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 75020000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 95232, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1977307769|0x3273d1565bf30225c115b480a3bb2c9d|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 75200000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 178176, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |429912748|0x942a17d2901a31ea68627cbffcd268cc|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 597f0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 437248, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |967653341|0xc2a4fdbd76953411000a01eb047ddc12|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5f770000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 14/04/2008  00:12, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1352312310|0xec29a79f1e76dc509e24d401f29d0678|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75390000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 273920, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556445984|0x26d881d27cbe51d3614e68d7313ea026|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5f740000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 47104, File modification date = 14/04/2008  00:12, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1166824097|0xd26451b540720a7313a9bcbe794daf62|
	  c:\windows\system32\qmgr.dll, MID = 5b9f0000,  ("c:\windows\system32\qmgr.dll") File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  c:\windows\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  C:\WINDOWS\System32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\qmgrprxy.dll, MID = 5ddc0000,  ("c:\windows\system32\qmgrprxy.dll") File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 18944, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service Proxy, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1661781771|0xf1dac7969c1337af790bd1d981aa780c|
	  C:\WINDOWS\system32\netcfgx.dll, MID = 755f0000,  ("c:\windows\system32\netcfgx.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 622592, File modification date = 14/04/2008  00:12, File description = Network Configuration Objects, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742651555|0x37a62c6092aadd2efde0468dd8818e99|
	  C:\WINDOWS\system32\upnp.dll, MID = 76de0000,  ("c:\windows\system32\upnp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 133632, File modification date = 14/04/2008  00:12, File description = Universal Plug and Play API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1575648411|0x93c088c2aeb2f23e720bda7e32bd5117|
	  C:\WINDOWS\system32\SSDPAPI.dll, MID = 74f00000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34816, File modification date = 14/04/2008  00:12, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1379733117|0x3d075865dcc26931972f6476ad0497be|
	  C:\WINDOWS\System32\rasmans.dll, MID = 7df30000,  ("c:\windows\system32\rasmans.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
	  C:\WINDOWS\System32\WINIPSEC.DLL, MID = 74370000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 32256, File modification date = 14/04/2008  00:12, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1414615888|0x248712ea6ba17b9ff0c542a3828375dd|
	  c:\windows\system32\tapisrv.dll, MID = 733e0000,  ("c:\windows\system32\tapisrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
	  C:\WINDOWS\System32\rastapi.dll, MID = 75880000,  ("c:\windows\system32\rastapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 58368, File modification date = 14/04/2008  00:12, File description = Remote Access TAPI Compliance Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-250933167|0x5f7692cec90e2e9aa32cd58321e234b8|
	  C:\WINDOWS\System32\unimdm.tsp, MID = 57cc0000,  ("c:\windows\system32\unimdm.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 206848, File modification date = 14/04/2008  00:12, File description = Unimodem 5 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-532993221|0xaace07fe34fadddf973ce068a6424957|
	  C:\WINDOWS\System32\uniplat.dll, MID = 72000000,  ("c:\windows\system32\uniplat.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:12, File description = Unimodem AT Mini Driver Platform Driver for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-129377103|0x995252fcc4692b5b97ee17d596c9386e|
	  C:\WINDOWS\System32\kmddsp.tsp, MID = 57d40000,  ("c:\windows\system32\kmddsp.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33280, File modification date = 14/04/2008  00:12, File description = TAPI Kernel-Mode Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1995.  All Rights Reserved.) |511159877|0x76ec97c5068d3d9faa7774b0f659d31a|
	  C:\WINDOWS\System32\ndptsp.tsp, MID = 57d20000,  ("c:\windows\system32\ndptsp.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 56832, File modification date = 14/04/2008  00:12, File description = NDIS Proxy TAPI Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1997.  All Rights Reserved.) |-1849609816|0x4589963d84f2984fa5949a72162ba4f4|
	  C:\WINDOWS\System32\ipconf.tsp, MID = 57d50000,  ("c:\windows\system32\ipconf.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 17408, File modification date = 14/04/2008  00:12, File description = Microsoft Multicast Conference TAPI Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-195151459|0x8b8a45df7cef36d93c7bd3e4c84003b8|
	  C:\WINDOWS\System32\h323.tsp, MID = 57d70000,  ("c:\windows\system32\h323.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 265728, File modification date = 14/04/2008  00:12, File description = Microsoft H.323 Telephony Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-119032191|0x8bc2b02dc11c98d14cee43b8e8393ff3|
	  C:\WINDOWS\System32\hidphone.tsp, MID = 57d60000,  ("c:\windows\system32\hidphone.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 29696, File modification date = 14/04/2008  00:12, File description = Microsoft HID Phone TSP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-322754116|0x6b552ed3bee5aa3c4560478ff779ba98|
	  C:\WINDOWS\System32\HID.DLL, MID = 688f0000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 14/04/2008  00:11, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2011900532|0x8973122796e3b5d6b5900fc186e55fea|
	  C:\WINDOWS\System32\rasppp.dll, MID = 72240000,  ("c:\windows\system32\rasppp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 210944, File modification date = 14/04/2008  00:12, File description = Remote Access PPP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |963005772|0xd0545a010ed2259a740c8414899a938f|
	  C:\WINDOWS\System32\ntlsapi.dll, MID = 724b0000,  ("c:\windows\system32\ntlsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 8192, File modification date = 14/04/2008  00:12, File description = Microsoft License Server Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1778743022|0xb464bd425d5d09abe4192234d1577b22|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cf0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 299520, File modification date = 14/04/2008  00:11, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-612695399|0xb17defd576ae373e7a1a2c75665e4549|
	  C:\WINDOWS\System32\cryptdll.dll, MID = 76790000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33280, File modification date = 14/04/2008  00:11, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363977478|0x17a1d675c12bbf80caac54a4855c41d0|
	  C:\WINDOWS\System32\RASQEC.DLL, MID = 72ae0000,  ("c:\windows\system32\rasqec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61952, File modification date = 14/04/2008  00:12, File description = RAS Quarantine Enforcement Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093243760|0xa655c88aa555bb8ef8957bd29408827f|
	  C:\WINDOWS\System32\RASDLG.dll, MID = 768d0000,  ("c:\windows\system32\rasdlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 658432, File modification date = 14/04/2008  00:12, File description = Remote Access Common Dialog API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1224370499|0x401a8c0be0baa7d7a470f0942244152d|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\wups2.dll, MID = 50e60000,  ("c:\windows\system32\wups2.dll") File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 43544, File modification date = 16/10/2008  19:09, File description = Windows Update client proxy stub 2, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1657815012|0x039133c02d61c3ce6c952092054b1148|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74ed0000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 43520, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1136134851|0x010472d0ae758227c6f6e6933549c219|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\Program Files\Bonjour\mdnsNSP.dll, MID = 16080000,  ("c:\program files\bonjour\mdnsnsp.dll") File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
	  C:\WINDOWS\System32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 138752, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1930455596|0xfede68bf80052bad393afd5c2e60dcb0|
	  C:\WINDOWS\system32\advpack.dll, MID = 42ec0000,  ("c:\windows\system32\advpack.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 124928, File modification date = 20/12/2008  23:15, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057239800|0xfc2c6d8a225fd6dadf7d018689ab129b|
	  C:\WINDOWS\system32\mlang.dll, MID = 75cf0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 586240, File modification date = 14/04/2008  00:11, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719027136|0xb714735c12a70171de28657948fd91f1|
	  C:\WINDOWS\System32\xmlprovi.dll, MID = 4cb90000,  ("c:\windows\system32\xmlprovi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 50176, File modification date = 14/04/2008  00:12, File description = Network Provisioning Service Client API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |452593209|0x566382ca5f2c41feaeeefac908f1eb92|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73d30000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 71680, File modification date = 14/04/2008  00:12, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1472036770|0x6404807abc7af52fa3792697ae638b50|

	PROCESS	svchost, PID = 1140, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k NetworkService
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\dnsrslvr.dll, MID = 76770000,  ("c:\windows\system32\dnsrslvr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:11, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
	  c:\windows\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|

	PROCESS	svchost, PID = 1204, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 630000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\lmhsvc.dll, MID = 74c40000,  ("c:\windows\system32\lmhsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:11, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\windows\system32\webclnt.dll, MID = 5a6e0000,  ("c:\windows\system32\webclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:12, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 9d0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  c:\windows\system32\regsvc.dll, MID = 76af0000,  ("c:\windows\system32\regsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:12, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
	  c:\windows\system32\ssdpsrv.dll, MID = 765e0000,  ("c:\windows\system32\ssdpsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:12, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\httpapi.dll, MID = 67570000,  ("c:\windows\system32\httpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:11, File description = HTTP Protocol Stack API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-65895855|0x144840418c0b702852f269ea6faa8c17|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|

	PROCESS	aawservice, PID = 1444, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe"
		  "c:\program files\lavasoft\ad-aware\aawservice.exe" File version = 7,1,0,12, File size = 611664, File modification date = 25/07/2008  16:12, File description = Ad-Aware Service, Product Name = Ad-Aware Service, Product version = 7,1,0,12, Company name = Lavasoft (Copyright (C) 2008) |1438890876|0x17067069b9a7865028c1f2e6971d0ccc|
	  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe, MID = 400000,  ("c:\program files\lavasoft\ad-aware\aawservice.exe") File version = 7,1,0,12, File size = 611664, File modification date = 25/07/2008  16:12, File description = Ad-Aware Service, Product Name = Ad-Aware Service, Product version = 7,1,0,12, Company name = Lavasoft (Copyright (C) 2008) |1438890876|0x17067069b9a7865028c1f2e6971d0ccc|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\Program Files\Lavasoft\Ad-Aware\CEAPI.dll, MID = 10000000,  ("c:\program files\lavasoft\ad-aware\ceapi.dll") File version = 7,1,0,13, File size = 1042792, File modification date = 07/02/2009  15:45, File description = CEAPI Dynamic Link Library, Product Name = CEAPI Dynamic Link Library, Product version = 7,1,0,13, Company name = Lavasoft (Copyright (C) 2008) |-943257463|0x5a148de2e59bb72c11f0d5ba4323d278|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 350000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\Program Files\Lavasoft\Ad-Aware\PKArchive85u.dll, MID = 4a0000,  ("c:\program files\lavasoft\ad-aware\pkarchive85u.dll") File version = 8.4.1045.0, File size = 907096, File modification date = 18/01/2008  19:44, File description = PKWARE Archive API - CryptoAPI (Unicode), Product Name = PKWARE Archive API, Product version = 8,4,1045,0, Company name = PKWARE, Inc. (Portions copyright (C) 1989-2007 PKWARE, Inc.) |1572620690|0x46374252afa0a37f4f7af528f6f16b96|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|

	PROCESS	explorer, PID = 1580, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = C:\WINDOWS\Explorer.EXE
		  "c:\windows\explorer.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:12, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
	  C:\WINDOWS\Explorer.EXE, MID = 1000000,  ("c:\windows\explorer.exe") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:12, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f80000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e290000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 754d0000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 512512, File modification date = 14/04/2008  00:11, File description = Microsoft Trust UI Provider, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2087176561|0x6e4be11d50f8a8de2bad644c9c9de8d3|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 400000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a20000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:11, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 76600000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:11, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
	  C:\WINDOWS\system32\themeui.dll, MID = 5ba60000,  ("c:\windows\system32\themeui.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:12, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76380000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 4608, File modification date = 14/04/2008  00:11, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1879070734|0xaffc87e2501fce8f09d4c10ba6421ccf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1480000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d40000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.5512 (xpsp.080413-2113), File size = 98304, File modification date = 14/04/2008  00:11, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1424813738|0x912b67bb8249925a5c972fc5839eae09|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76990000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:12, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\webcheck.dll, MID = 42e40000,  ("c:\windows\system32\webcheck.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
	  C:\WINDOWS\system32\IEFRAME.dll, MID = 42ef0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\stobject.dll, MID = 76280000,  ("c:\windows\system32\stobject.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 121856, File modification date = 14/04/2008  00:12, File description = Systray shell service object, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-505515755|0x50512fc9b7878e3c2c147bc17326a7db|
	  C:\WINDOWS\system32\BatMeter.dll, MID = 74af0000,  ("c:\windows\system32\batmeter.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 29184, File modification date = 14/04/2008  00:11, File description = Battery Meter Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |481886046|0x231a0b0e3ba7abfe469a8262faa1fd71|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74ad0000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 17408, File modification date = 14/04/2008  00:12, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662701231|0x50a166237a0fa771261275a405646cc0|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WPDShServiceObj.dll, MID = 164a0000,  ("c:\windows\system32\wpdshserviceobj.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 19/10/2006  03:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\mydocs.dll, MID = 72410000,  ("c:\windows\system32\mydocs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:12, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
	  C:\WINDOWS\system32\PortableDeviceTypes.dll, MID = 109c0000,  ("c:\windows\system32\portabledevicetypes.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 166912, File modification date = 19/10/2006  03:47, File description = Windows Portable Device (Parameter) Types Component, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |186518969|0x22358578cb321f3325496a3723029409|
	  C:\WINDOWS\system32\PortableDeviceApi.dll, MID = 10930000,  ("c:\windows\system32\portabledeviceapi.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 284160, File modification date = 19/10/2006  03:47, File description = Windows Portable Device API Components, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-387235283|0x9d45b2201d0ecf9f42136c7b99deb8b2|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76980000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 19968, File modification date = 14/04/2008  00:11, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-615224053|0x2dc5a8019e2387987905f77c664e4be2|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75cf0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 586240, File modification date = 14/04/2008  00:11, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719027136|0xb714735c12a70171de28657948fd91f1|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f60000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:11, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |331693154|0x2de1190196ee9555db548a57622022eb|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71c10000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 44032, File modification date = 14/04/2008  00:12, File description = Microsoft Lan Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1703319395|0x36468087e22c57a83df758b3f90df73f|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cd0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = NT LM UI Common Code - GUI Classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-286856417|0xac5df42fe314c1446b1dad237bfcffe0|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c90000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 245760, File modification date = 14/04/2008  00:12, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |841396087|0xed5a816d8e11e03f1937ac3c56826ee4|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:12, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f70000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:11, File description = Web DAV Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |325003362|0xfb8f8eec8d9c2157789472dd61cdc78b|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72d20000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72d10000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 04/08/2004  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bd0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:11, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|
	  C:\WINDOWS\system32\NETSHELL.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  C:\WINDOWS\system32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:11, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  C:\WINDOWS\system32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:11, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:11, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  C:\WINDOWS\system32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:12, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  C:\WINDOWS\system32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  C:\WINDOWS\system32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\WZCSAPI.DLL, MID = 73030000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 52736, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1800689210|0x767ff54a552732ce772c2302025fa82f|
	  C:\WINDOWS\system32\wzcdlg.dll, MID = 5df10000,  ("c:\windows\system32\wzcdlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 383488, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration Service UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-92135378|0xb48e7b4c95cce0c6c0c3f7b1a97fbc8f|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll, MID = 10000000,  ("c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll") File version = 7.0.0.0, File size = 110592, File modification date = 14/12/2004  07:20, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 7.0.0.0, Company name = Adobe Systems, Inc. (Copyright 2000-2004 Adobe Systems, Inc.) |-1692954884|0x4b0991cd076b617a2231b19a6663c1c9|
	  C:\WINDOWS\system32\zipfldr.dll, MID = 73380000,  ("c:\windows\system32\zipfldr.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:12, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
	  C:\Program Files\Yahoo!\Common\YMMAPI.dll, MID = 64000000,  ("c:\program files\yahoo!\common\ymmapi.dll") File version = 2005, 1, 1, 12, File size = 285464, File modification date = 28/06/2007  21:41, File description = Yahoo! Mail, Product Name = Yahoo! Mail, Product version = 1, 0, 0, 0, Company name = Yahoo! Inc. (Copyright  2001-2007 Yahoo! Inc.) |-2137713201|0x42d08a04bea63d24545c543583bc5d7a|
	  C:\Program Files\WinRAR\rarext.dll, MID = 2030000,  ("c:\program files\winrar\rarext.dll") File version = 3.80, File size = 132608, File modification date = 14/08/2008  04:55, File description = WinRAR shell extension, Product Name = WinRAR, Product version = (null), Company name = Alexander Roshal (Copyright  Alexander Roshal 1993-2008) |-1332401752|0xf53997bcff2633bc11bfee4d927b7797|
	  C:\WINDOWS\system32\nwprovau.dll, MID = 5f0e0000,  ("c:\windows\system32\nwprovau.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 142336, File modification date = 14/04/2008  00:12, File description = Client Service for NetWare Provider and Authentication Package DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |227468934|0x06e587f41466569f32beaac7260e8aec|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mcctxmnu.dll, MID = 6c600000,  ("c:\program files\mcafee\virusscan\mcctxmnu.dll") File version = 12,0,172,0, File size = 165192, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan - Context Menu, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |422767601|0x840cf950dcb4c96bb7a4877a23d5f6be|
	  C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll, MID = 2680000,  ("c:\program files\malwarebytes' anti-malware\mbamext.dll") File version = 1, 1, 0, 0, File size = 73360, File modification date = 14/01/2009  21:11, File description = Malwarebytes' Anti-Malware, Product Name = Malwarebytes' Anti-Malware, Product version = 1, 1, 0, 0, Company name = Malwarebytes Corporation ( Malwarebytes Corporation. All rights reserved.) |1121151919|0xc6aebea6a09841b2ee7a495085462f4d|
	  C:\WINDOWS\system32\browselc.dll, MID = 71600000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 63488, File modification date = 13/04/2008  17:03, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1708716304|0xf3370c98f4981eda6036689d298e67b9|
	  C:\PROGRA~1\SPYBOT~1\SDHelper.dll, MID = 3200000,  ("c:\program files\spybot - search & destroy\sdhelper.dll") File version = 1, 6, 2, 14, File size = 1879896, File modification date = 26/01/2009  20:31, File description = SBSD IE Protection, Product Name = Spybot - Search & Destroy, Product version = 1, 6, 0, 0, Company name = Safer Networking Limited ( 2000-2008 Safer Networking Limited. Alle Rechte vorbehalten.) |1537359879|0x022c2f6dccdfa0ad73024d254e62afac|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\system32\winspool.drv, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\faultrep.dll, MID = 69450000,  ("c:\windows\system32\faultrep.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80384, File modification date = 14/04/2008  00:11, File description = Windows Error Reporting, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716915297|0x0099d24356585743b0b35c222092fd8f|
	  C:\WINDOWS\system32\olepro32.dll, MID = 5edd0000,  ("c:\windows\system32\olepro32.dll") File version = 5.1.2600.5512, File size = 84992, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |251422097|0x5652f6ce1d9e9d8068b9d29bc21b5409|
	  C:\WINDOWS\system32\jsproxy.dll, MID = 42b80000,  ("c:\windows\system32\jsproxy.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 27648, File modification date = 20/12/2008  23:15, File description = JScript Proxy Auto-Configuration, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |665793425|0x17e9df9c624d2e1cdd5c9cf3e8608058|
	  C:\Program Files\McAfee\VirusScan\scriptsn.dll, MID = 14490000,  ("c:\program files\mcafee\virusscan\scriptsn.dll") File version = VSCORE.14.0.0.366.x86, File size = 58688, File modification date = 09/11/2007  17:09, File description = VSCore Script Scanner, Product Name = VSCORE.14.0.0.366.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-947093879|0x5b9fcb73f5a4a000c55aff08b639a07c|
	  C:\WINDOWS\system32\JScript.dll, MID = 75c50000,  ("c:\windows\system32\jscript.dll") File version = 5.7.0.18066, File size = 512000, File modification date = 09/05/2008  10:53, File description = Microsoft (R) JScript, Product Name = Microsoft (R) JScript, Product version = 5.7.0.18066, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |765734808|0x7c6b20f70f427abe9c9f490b50e3d736|
	  C:\WINDOWS\system32\VBScript.dll, MID = 73300000,  ("c:\windows\system32\vbscript.dll") File version = 5.7.0.18066, File size = 430080, File modification date = 09/05/2008  10:53, File description = Microsoft (R) VBScript, Product Name = Microsoft (R) VBScript, Product version = 5.7.0.18066, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-824611173|0xc4effbe602ce2adc047af5cc1f858707|
	  C:\WINDOWS\system32\DUSER.dll, MID = 6c1b0000,  ("c:\windows\system32\duser.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 304128, File modification date = 14/04/2008  00:11, File description = Windows DirectUser Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1517075071|0x3d41a9326f0376fc73af961dd23b1fb1|

	PROCESS	spoolsv, PID = 1876, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742e0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1935663032|0x79e3a8c328e7e569c32b0998377d9742|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\localspl.dll, MID = 75bb0000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 343040, File modification date = 14/04/2008  00:11, File description = Local Spooler DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2118433154|0xd8ad3d7f927c686b8c233221513da628|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\winspool.drv, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 742a0000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 47104, File modification date = 14/04/2008  00:11, File description = Langage Monitor for Canon Bubble-Jet Printer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2082, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1431918685|0x5d3d1ab0ef4ea55b731863050482c111|
	  C:\WINDOWS\system32\OLFMNT40.DLL, MID = 1d040000,  ("c:\windows\system32\olfmnt40.dll") File version = 9.0.98.0105, File size = 132096, File modification date = 11/12/1998  16:29, File description = Symantec Fax Starter Edition Monitor DLL, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |-1294471421|0x60dd026280a2515a8b272ebbd78cd66e|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74280000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15360, File modification date = 14/04/2008  00:12, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2068458146|0x222de7f5edb9ddbe628384a1a8be59ce|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 72400000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 45568, File modification date = 14/04/2008  00:12, File description = Standard TCP/IP Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1967385716|0xae0382ad9c73d343d85e1a50c80b7c20|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723f0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 16896, File modification date = 14/04/2008  00:12, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936044745|0xf26385e8ba4549b5186b774ec0e45d86|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll, MID = 3f420000,  ("c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll") File version = 6.1.2600.5635 (xpsp_sp3_qfe.080704-1744), File size = 89088, File modification date = 06/07/2008  12:06, File description = Print Filter Pipeline Proxy, Product Name = Microsoft Windows Operating System, Product version = 6.1.2600.5635, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1416815678|0xeee7f12d9ff46f68fbc0da059a359e9e|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\olfpnt40.dll, MID = 1d000000,  ("c:\windows\system32\spool\prtprocs\w32x86\olfpnt40.dll") File version = 9.0.98.0105, File size = 13312, File modification date = 11/12/1998  16:29, File description = Symantec Fax Starter Edition Print DLL, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |1758746212|0x8bba88d530383d47baaff4ba96adedef|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\Program Files\Bonjour\mdnsNSP.dll, MID = 16080000,  ("c:\program files\bonjour\mdnsnsp.dll") File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75c10000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 102400, File modification date = 14/04/2008  00:12, File description = 32-bit Spooler API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-681651438|0x22dd6d7d4bfe2b8ce705cc950c8aea4c|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:12, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:12, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\inetpp.dll, MID = 74300000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 14/04/2008  00:11, File description = Internet Print Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1753129315|0xee4c651a217b01d636b5364ac77da892|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1010000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|

	PROCESS	AppleMobileDeviceService, PID = 1976, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
		  "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" File version = 2.11.32.0, File size = 116040, File modification date = 01/10/2008  17:06, File description = Apple Mobile Device Service, Product Name = Apple Mobile Device Service, Product version = 2.11.32.0, Company name = Apple Inc. ( 2007-2008 Apple Inc. All Rights Reserved.) |1186677590|0xb8e865d24f2753a35cc2a9a6a3ce1ad4|
	  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe, MID = 400000,  ("c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe") File version = 2.11.32.0, File size = 116040, File modification date = 01/10/2008  17:06, File description = Apple Mobile Device Service, Product Name = Apple Mobile Device Service, Product version = 2.11.32.0, Company name = Apple Inc. ( 2007-2008 Apple Inc. All Rights Reserved.) |1186677590|0xb8e865d24f2753a35cc2a9a6a3ce1ad4|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|

	PROCESS	ati2evxx, PID = 1988, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\Ati2evxx.exe
		  "c:\windows\system32\ati2evxx.exe" File version = 4.18.4060, File size = 147456, File modification date = 08/11/2002  03:22, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 4.18.4060, Company name = ATI Technologies Inc. (Copyright  1999-2002 ATI Technologies Inc.) |1548007852|0x61b40a0c3d725dbdcbc6999dd6ba4a4f|
	  C:\WINDOWS\system32\Ati2evxx.exe, MID = 400000,  ("c:\windows\system32\ati2evxx.exe") File version = 4.18.4060, File size = 147456, File modification date = 08/11/2002  03:22, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 4.18.4060, Company name = ATI Technologies Inc. (Copyright  1999-2002 ATI Technologies Inc.) |1548007852|0x61b40a0c3d725dbdcbc6999dd6ba4a4f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|

	PROCESS	mDNSResponder, PID = 2008, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Bonjour\mDNSResponder.exe"
		  "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	  C:\Program Files\Bonjour\mDNSResponder.exe, MID = 400000,  ("c:\program files\bonjour\mdnsresponder.exe") File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\IPHLPAPI.DLL, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:11, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  C:\WINDOWS\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:11, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  C:\WINDOWS\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:11, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|

	PROCESS	jqs, PID = 192, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
		  "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
		  "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 41207, File modification date = 22/02/2009  21:02, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1257361429|0xb59edd1d5295225bec3fa87cdb1876ff|
	  C:\Program Files\Java\jre6\bin\jqs.exe, MID = 400000,  ("c:\program files\java\jre6\bin\jqs.exe") File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\Program Files\Java\jre6\bin\MSVCR71.dll, MID = 7c340000,  ("c:\program files\java\jre6\bin\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 22/02/2009  21:02, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\pdh.dll, MID = 74000000,  ("c:\windows\system32\pdh.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 284160, File modification date = 14/04/2008  00:12, File description = Windows Performance Data Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1681868861|0x5454607f90878d7cd0bcdb6e0d3f235f|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 74320000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1657068939|0x52a5a388661ff3a889593185367b7226|
	  C:\WINDOWS\system32\odbcbcp.dll, MID = 711a0000,  ("c:\windows\system32\odbcbcp.dll") File version = 2000.085.1132.00 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:12, File description = Microsoft BCP for ODBC, Product Name = Microsoft SQL Server, Product version = 3.85.1132, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1990-2000) |904815961|0x369f7b1a4f358b976176556a1a331f36|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\odbcint.dll, MID = 6a0000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 94208, File modification date = 13/04/2008  17:26, File description = Microsoft Data Access - ODBC Resources, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1903028116|0x6b7c6b32f8e84d56c6260d684019fea2|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\perfos.dll, MID = 5e760000,  ("c:\windows\system32\perfos.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:12, File description = Windows System Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1616743010|0xacdafcd14ec0ece89198503746a5c147|
	  C:\WINDOWS\system32\perfdisk.dll, MID = 5e790000,  ("c:\windows\system32\perfdisk.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 26624, File modification date = 14/04/2008  00:12, File description = Windows Disk Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-832696454|0xabfb673b24a9b3287761d497529fb5b9|

	PROCESS	LinksysUpdater, PID = 188, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe"  -s "C:\Program Files\Linksys\Linksys Updater\conf\wrapper.conf"
		  "c:\program files\linksys\linksys updater\bin\linksysupdater.exe" File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
		  "c:\program files\linksys\linksys updater\conf\wrapper.conf" File version = (null), File size = 2442, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1890676943|0x87a811c19a08c115f700834c42d706eb|
	  C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe, MID = 400000,  ("c:\program files\linksys\linksys updater\bin\linksysupdater.exe") File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|

	PROCESS	mcmscsvc, PID = 240, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
		  "c:\program files\mcafee\msc\mcmscsvc.exe" File version = 8,1,159,0, File size = 767976, File modification date = 09/01/2008  20:50, File description = McAfee Services, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1752091033|0xcb3a8976de2f65349322da7627cea223|
	  C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe, MID = 400000,  ("c:\program files\mcafee\msc\mcmscsvc.exe") File version = 8,1,159,0, File size = 767976, File modification date = 09/01/2008  20:50, File description = McAfee Services, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1752091033|0xcb3a8976de2f65349322da7627cea223|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\PROGRA~1\COMMON~1\mcafee\msc\mcutil\8_1_11~1\McUtil.dll, MID = 62600000,  ("c:\program files\common files\mcafee\msc\mcutil\8,1,114,0\mcutil.dll") File version = 8,1,114,0, File size = 128368, File modification date = 05/11/2007  17:59, File description = McAfee Utility DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |546141047|0xca0732d2f2d582e669c9a408c4e2dcf9|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 800000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = f90000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\PROGRA~1\McAfee\MSC\McRes.dll, MID = 67200000,  ("c:\program files\mcafee\msc\mcres.dll") File version = 8,0,226,0, File size = 80720, File modification date = 01/11/2007  23:12, File description = McAfee Non-Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1129822568|0xcf5c2cbccc496b9157a7c56da71ea6bb|
	  C:\PROGRA~1\McAfee\MSC\McLocRes.dll, MID = 66500000,  ("c:\program files\mcafee\msc\mclocres.dll") File version = 8,1,153,0, File size = 64408, File modification date = 17/06/2008  21:27, File description = McAfee Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-724153272|0x68e87bfc4f94db36f97c20ce568638a5|
	  C:\Program Files\McAfee\MSC\oem\108\Mccobres.dll, MID = 66400000,  ("c:\program files\mcafee\msc\oem\108\mccobres.dll") File version = 8,1,144,0, File size = 689472, File modification date = 06/04/2008  02:11, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |318292930|0x9d7f4ca3a8234ab97bc3424bd859801d|
	  C:\PROGRA~1\McAfee\MSC\Mccobres.dll, MID = 1460000,  ("c:\program files\mcafee\msc\mccobres.dll") File version = 8,1,165,0, File size = 690648, File modification date = 17/06/2008  21:27, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |125212792|0x5a40321e68d4417839e3caff48a010d7|
	  C:\PROGRA~1\COMMON~1\McAfee\MSC\sqlite3.dll, MID = 62800000,  ("c:\program files\common files\mcafee\msc\sqlite3.dll") File version = 8,1,125,0, File size = 410072, File modification date = 11/01/2008  17:16, File description = Sqlite3 Database Module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1299470191|0x377a49ec40546ce62ab424f41d8d0300|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  c:\PROGRA~1\mcafee\msc\mcshllps.dll, MID = 67300000,  ("c:\program files\mcafee\msc\mcshllps.dll") File version = 8,1,133,0, File size = 95568, File modification date = 02/11/2007  03:32, File description = McAfee McShell Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |369966862|0x2bbebd88f878d07df1c98d31b08ff545|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  c:\PROGRA~1\mcafee\msc\mcmscver.dll, MID = 66d00000,  ("c:\program files\mcafee\msc\mcmscver.dll") File version = 8,1,136,0, File size = 320848, File modification date = 05/11/2007  21:36, File description = McMSCVer, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1748066453|0x828c209f104b6776a6a3733dea524f6f|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvsap.dll, MID = 60f00000,  ("c:\program files\mcafee\virusscan\mvsap.dll") File version = 12,0,172,0, File size = 185672, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan Application Information, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-85479475|0xa3ff6f525fec34233f2092f946a2e71d|
	  c:\WINDOWS\system32\msxml4.dll, MID = 69b10000,  ("c:\windows\system32\msxml4.dll") File version = 4.20.9870.0, File size = 1286152, File modification date = 30/09/2008  21:43, File description = MSXML 4.0 SP 2, Product Name = Microsoft(R) MSXML 4.0 SP 2, Product version = 4.20.9870.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2002) |1609475140|0xa6b8503687a268bfd620a12271816e36|
	  c:\PROGRA~1\mcafee\mpf\mc\mpfmisp.dll, MID = 63400000,  ("c:\program files\mcafee\mpf\mc\mpfmisp.dll") File version = 9.0.136.0, File size = 1047328, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Plus, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1765866144|0x973411647a7fe64a78a463640969ea9d|
	  C:\WINDOWS\system32\COMDLG32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76380000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 4608, File modification date = 14/04/2008  00:11, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1879070734|0xaffc87e2501fce8f09d4c10ba6421ccf|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\Program Files\McAfee\MPF\L10N.DLL, MID = 63000000,  ("c:\program files\mcafee\mpf\l10n.dll") File version = 9.1.108.0, File size = 215568, File modification date = 24/11/2008  16:48, File description = McAfee Personal Firewall Plus L10N, Product Name = McAfee Personal Firewall, Product version = 9.1.108.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-419163114|0xfae0eb2baf9f9521faf3b8906c30845c|
	  c:\PROGRA~1\mcafee\mps\mpsmisp.dll, MID = 64400000,  ("c:\program files\mcafee\mps\mpsmisp.dll") File version = 10.1.137.0, File size = 401696, File modification date = 21/12/2007  20:16, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.137.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-1446438251|0x6f647fee2c558a016bfd73cce8f4ca0f|
	  C:\WINDOWS\system32\cryptnet.dll, MID = 75e60000,  ("c:\windows\system32\cryptnet.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 64512, File modification date = 14/04/2008  00:11, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-93686787|0xc14350fc0d47d806699c4f907fc6785b|
	  C:\WINDOWS\system32\SensApi.dll, MID = 722b0000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 7168, File modification date = 14/04/2008  00:12, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |847250885|0x3cba2210fa39c6ed7895634842e930dd|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  C:\Program Files\McAfee\MPS\MpsRes.DLL, MID = 10000000,  ("c:\program files\mcafee\mps\mpsres.dll") File version = 10.0.263.0, File size = 457232, File modification date = 27/11/2008  21:41, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.0.263.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-483242071|0x8e64725d18f79e8db0e2ce6cb69cf39a|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mcvspp.dll, MID = 60b00000,  ("c:\program files\mcafee\virusscan\mcvspp.dll") File version = 12,1,109,0, File size = 210248, File modification date = 05/12/2007  18:02, File description = McAfee VirusScan Protection Provider, Product Name = McAfee VirusScan, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |650564613|0x392653214bca3b24d2757e4b65b05082|
	  c:\PROGRA~1\mcafee\mps\mpspii.dll, MID = 64b00000,  ("c:\program files\mcafee\mps\mpspii.dll") File version = 10.1.141.0, File size = 259360, File modification date = 26/06/2008  18:05, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.141.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-386712522|0xe22e916a27bfb77fe456b88473fe264e|
	  c:\PROGRA~1\mcafee\mps\mpscfg.dll, MID = 64600000,  ("c:\program files\mcafee\mps\mpscfg.dll") File version = 10.1.137.0, File size = 472352, File modification date = 21/12/2007  20:17, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.137.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |1354445874|0x8dde39756ede7cdc8f5b14952de2d857|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\PROGRA~1\mcafee\mps\mpspc.dll, MID = 64a00000,  ("c:\program files\mcafee\mps\mpspc.dll") File version = 10.1.141.0, File size = 226592, File modification date = 26/06/2008  18:05, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.141.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-663968352|0xed44d81fd1730658f94aeacf35a8eef1|
	  c:\PROGRA~1\mcafee\msc\mcprotpv.dll, MID = 66f00000,  ("c:\program files\mcafee\msc\mcprotpv.dll") File version = 8,0,226,0, File size = 329040, File modification date = 01/11/2007  23:12, File description = MISP Default Protection Provider, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1521046628|0xc12af9adfd6b2a8011cab87e77ce1408|
	  c:\PROGRA~1\mcafee\mbk\mbkprov.dll, MID = 2ca0000,  ("c:\program files\mcafee\mbk\mbkprov.dll") File version = 1.0.0.3, File size = 437288, File modification date = 16/01/2007  18:59, File description = (null), Product Name = McAfee Data Backup, Product version = 1.0.0.3, Company name = McAfee (McAfee) |-1955901144|0xbb4b35606ce1f3236baa8396f22ca8c0|
	  c:\PROGRA~1\mcafee\msc\mcnmcprv.dll, MID = 6b280000,  ("c:\program files\mcafee\msc\mcnmcprv.dll") File version = 2,1,151,0, File size = 385768, File modification date = 18/01/2008  12:21, File description = McAfee NMC Provider, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1753992479|0xfcf388a3eb9f8286a93fbc94a7804854|
	  C:\PROGRA~1\McAfee\MSC\McNmcRes.dll, MID = 6b300000,  ("c:\program files\mcafee\msc\mcnmcres.dll") File version = 2,1,151,0, File size = 150928, File modification date = 18/01/2008  12:21, File description = McAfee NMC Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1654768546|0x244b30b37b46968f7dbe0748274ce6e8|
	  C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll, MID = 6b200000,  ("c:\program files\mcafee\msc\mcnmclor.dll") File version = 2,1,151,0, File size = 16568, File modification date = 18/01/2008  12:24, File description = McAfee NMC Localized Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1587310252|0x7dad4ae7938a92ad7d614e55bb82e3a3|
	  C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll, MID = 6b100000,  ("c:\program files\mcafee\msc\mcnmccor.dll") File version = 2,1,151,0, File size = 14520, File modification date = 18/01/2008  12:24, File description = McAfee NMC Co-Branded Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1150627641|0x2b925b6d5ee70a0686f8e1314adbd61f|
	  c:\PROGRA~1\COMMON~1\mcafee\mna\MCNASV~1.DLL, MID = 6b600000,  ("c:\program files\common files\mcafee\mna\mcnasvcps.dll") File version = 2,1,143,0, File size = 85008, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent Proxy/Stub, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |2118649920|0x19b21fdcdd5bf86d86254a8416e407e2|
	  c:\PROGRA~1\mcafee\msc\mcnmcsps.dll, MID = 6b380000,  ("c:\program files\mcafee\msc\mcnmcsps.dll") File version = 2,0,115,0, File size = 66848, File modification date = 02/11/2007  05:43, File description = McAfee NMC Server Proxy Stub, Product Name = McAfee Integrated Security Platform, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1025325749|0x8d687570948c1f728c552ef55e3572f2|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvscfg.dll, MID = 61000000,  ("c:\program files\mcafee\virusscan\mvscfg.dll") File version = 12,1,118,0, File size = 324936, File modification date = 03/01/2008  12:16, File description = McAfee Configuration Object Tool, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1842676381|0x6f95acc764a3755314cce267b7f8bfaf|
	  c:\PROGRA~1\mcafee\VIRUSS~1\naiannps.dll, MID = 61a00000,  ("c:\program files\mcafee\virusscan\naiannps.dll") File version = 12,0,188,0, File size = 24392, File modification date = 06/11/2007  21:22, File description = McAfee VirusScan Announcer Proxy Stub dll, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-851671091|0x0255e9cea240a664f403da759fd50954|
	  c:\PROGRA~1\mcafee\msc\mcregobj\8_0_22~1\mcregobj.dll, MID = 67100000,  ("c:\program files\mcafee\msc\mcregobj\8,0,226,0\mcregobj.dll") File version = 8,0,226,0, File size = 300368, File modification date = 01/11/2007  23:12, File description = MISP Registration Component, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1322175312|0xe8b7a11bbb7e1e47b58ba5bc69d73556|
	  c:\PROGRA~1\mcafee\mpf\mc\mpfp.dll, MID = 63200000,  ("c:\program files\mcafee\mpf\mc\mpfp.dll") File version = 9.0.136.0, File size = 730400, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Plus API, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |1468672897|0x9bb8167c197ba54dadad677d1db51aa6|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  c:\PROGRA~1\mcafee\msc\mcdemenu.dll, MID = 66900000,  ("c:\program files\mcafee\msc\mcdemenu.dll") File version = 8,0,226,0, File size = 435024, File modification date = 01/11/2007  23:12, File description = Default Menu Provider, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-471464148|0x2c4913a5581e3b9d032d9a57477bb27c|
	  C:\PROGRA~1\McAfee\MSC\McProHlp.dll, MID = 66e00000,  ("c:\program files\mcafee\msc\mcprohlp.dll") File version = 8,0,226,0, File size = 240976, File modification date = 01/11/2007  23:12, File description = Mc Security Index, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-698737473|0xa1cb12bce7436ef6edd7946f9fbc4703|
	  c:\PROGRA~1\mcafee\mps\mpspv.dll, MID = 64c00000,  ("c:\program files\mcafee\mps\mpspv.dll") File version = 10.1.133.0, File size = 214304, File modification date = 22/11/2007  16:23, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.133.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |1480095648|0x48caae900e43d4cc188b257e8aa93a86|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvscp.dll, MID = 61100000,  ("c:\program files\mcafee\virusscan\mvscp.dll") File version = 12,0,172,0, File size = 169288, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan - Configuration Provider, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |953536605|0x63da6121eb851f63ebb95c0c5d78c3a3|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  c:\PROGRA~1\mcafee\msc\mcuicfg.dll, MID = 67600000,  ("c:\program files\mcafee\msc\mcuicfg.dll") File version = 8,0,226,0, File size = 116048, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-763052641|0x6808762c4fc147c6d8af1ce3e9267517|
	  c:\PROGRA~1\mcafee\msc\mccfgpv.dll, MID = 66300000,  ("c:\program files\mcafee\msc\mccfgpv.dll") File version = 8,1,133,0, File size = 425808, File modification date = 02/11/2007  03:31, File description = MISP Default Configuration Provider, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1174477467|0xcc2ca1aa9623a737ef4905271b3fc62d|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvsver.dll, MID = 61800000,  ("c:\program files\mcafee\virusscan\mvsver.dll") File version = 12,0,188,0, File size = 206152, File modification date = 06/11/2007  21:22, File description = McAfee Version information Tool, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |807249922|0xd7acce83be1f8cf6c2fb1ad4864a3530|
	  C:\WINDOWS\system32\LZ32.dll, MID = 73dc0000,  ("c:\windows\system32\lz32.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 2560, File modification date = 04/08/2004  12:00, File description = LZ Expand/Compress API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1894233231|0xc3200506fb212a0f4fb736a80e646c40|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll, MID = 62b00000,  ("c:\program files\common files\mcafee\core\mcevtbrk.dll") File version = 3,0,115,0, File size = 267600, File modification date = 31/07/2007  05:02, File description = McAfee Event Broker, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |86852663|0x28223d573c66522cf9f9dce551747e06|
	  c:\PROGRA~1\COMMON~1\mcafee\mcproxy\proxyver.dll, MID = 62300000,  ("c:\program files\common files\mcafee\mcproxy\proxyver.dll") File version = 2,0,150,0, File size = 149328, File modification date = 15/08/2007  17:36, File description = McAfee Proxy Version, Product Name = McAfee Proxy, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1821552723|0x5f4bcd0ae7366230463c3b1e0b5482a6|
	  c:\PROGRA~1\COMMON~1\mcafee\HACKER~1\hwapi.dll, MID = 62e00000,  ("c:\program files\common files\mcafee\hackerwatch\hwapi.dll") File version = 9.0.119.0, File size = 620648, File modification date = 18/06/2007  15:41, File description = McAfee HackerWatch, Product Name = McAfee HackerWatch, Product version = 9.0.119.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |245985810|0xd07f2ba1451ae4f97985a2870f682a8e|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75150000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 60416, File modification date = 14/04/2008  00:11, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1315966031|0xf9d3c78cfe15271d80790677c893ce45|
	  c:\PROGRA~1\mcafee\mps\mpsver.dll, MID = 64900000,  ("c:\program files\mcafee\mps\mpsver.dll") File version = 10.0.263.0, File size = 144160, File modification date = 08/11/2007  14:46, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.0.263.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-1225726883|0xb69aeccd00924c2b90971a7c39356023|
	  c:\PROGRA~1\mcafee\msc\mcnmcver.dll, MID = 6b480000,  ("c:\program files\mcafee\msc\mcnmcver.dll") File version = 2,0,115,0, File size = 181536, File modification date = 02/11/2007  05:43, File description = McNMCVer, Product Name = McAfee Integrated Security Platform, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1242331851|0xff20c98e3ae040b415257329e2bfaf3f|
	  c:\PROGRA~1\mcafee\mqc\qcmisp.dll, MID = 65300000,  ("c:\program files\mcafee\mqc\qcmisp.dll") File version = 8,1,106,0, File size = 591136, File modification date = 04/12/2007  18:32, File description = QuickClean MISP Providers, Product Name = McAfee QuickClean, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-614177504|0x9d533d4d7243baf3b52bec9fe6a622bd|
	  c:\PROGRA~1\mcafee\mqc\QcLite.dll, MID = 65200000,  ("c:\program files\mcafee\mqc\qclite.dll") File version = 8,1,106,0, File size = 304416, File modification date = 04/12/2007  18:32, File description = McAfee QuickClean DLL, Product Name = McAfee QuickClean, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1332396749|0xc5c42f7a44993d1824df70000cd34ecf|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74ef0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 18944, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |875370577|0x205add80ff8099b1a8101eb490b933d1|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75290000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 214528, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025270981|0xd95c71052e5ef63b55997fb31483d02f|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74ed0000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 43520, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1136134851|0x010472d0ae758227c6f6e6933549c219|
	  C:\WINDOWS\system32\wbem\fastprox.dll, MID = 75690000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 472064, File modification date = 14/04/2008  00:11, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-572631280|0x60027bea3e76d7dd8d96c02432bfde82|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:12, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|

	PROCESS	McNASvc, PID = 420, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe"
		  "c:\program files\common files\mcafee\mna\mcnasvc.exe" File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|
	  c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe, MID = 400000,  ("c:\program files\common files\mcafee\mna\mcnasvc.exe") File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = b10000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  c:\PROGRA~1\COMMON~1\mcafee\msc\mcutil\8_1_11~1\McUtil.dll, MID = 62600000,  ("c:\program files\common files\mcafee\msc\mcutil\8,1,114,0\mcutil.dll") File version = 8,1,114,0, File size = 128368, File modification date = 05/11/2007  17:59, File description = McAfee Utility DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |546141047|0xca0732d2f2d582e669c9a408c4e2dcf9|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 9a0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  c:\PROGRA~1\mcafee\msc\mcnmcsrv.dll, MID = 6c600000,  ("c:\program files\mcafee\msc\mcnmcsrv.dll") File version = 2,1,151,0, File size = 1185048, File modification date = 18/01/2008  12:21, File description = McAfee NMC Server, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1691373064|0x75b5c9f6090d89d4e87a675007063ebb|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  c:\PROGRA~1\mcafee\msc\mcshllps.dll, MID = 67300000,  ("c:\program files\mcafee\msc\mcshllps.dll") File version = 8,1,133,0, File size = 95568, File modification date = 02/11/2007  03:32, File description = McAfee McShell Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |369966862|0x2bbebd88f878d07df1c98d31b08ff545|
	  C:\WINDOWS\system32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:11, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  C:\WINDOWS\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:11, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  C:\WINDOWS\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:11, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  c:\PROGRA~1\COMMON~1\mcafee\mna\MCNASV~1.DLL, MID = 6b600000,  ("c:\program files\common files\mcafee\mna\mcnasvcps.dll") File version = 2,1,143,0, File size = 85008, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent Proxy/Stub, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |2118649920|0x19b21fdcdd5bf86d86254a8416e407e2|
	  c:\PROGRA~1\mcafee\msc\mcnmcsps.dll, MID = 6b380000,  ("c:\program files\mcafee\msc\mcnmcsps.dll") File version = 2,0,115,0, File size = 66848, File modification date = 02/11/2007  05:43, File description = McAfee NMC Server Proxy Stub, Product Name = McAfee Integrated Security Platform, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1025325749|0x8d687570948c1f728c552ef55e3572f2|
	  c:\PROGRA~1\mcafee\mpf\mc\mpfp.dll, MID = 63200000,  ("c:\program files\mcafee\mpf\mc\mpfp.dll") File version = 9.0.136.0, File size = 730400, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Plus API, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |1468672897|0x9bb8167c197ba54dadad677d1db51aa6|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\cryptnet.dll, MID = 75e60000,  ("c:\windows\system32\cryptnet.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 64512, File modification date = 14/04/2008  00:11, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-93686787|0xc14350fc0d47d806699c4f907fc6785b|
	  C:\WINDOWS\system32\SensApi.dll, MID = 722b0000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 7168, File modification date = 14/04/2008  00:12, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |847250885|0x3cba2210fa39c6ed7895634842e930dd|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\WINDOWS\system32\msxml4.dll, MID = 69b10000,  ("c:\windows\system32\msxml4.dll") File version = 4.20.9870.0, File size = 1286152, File modification date = 30/09/2008  21:43, File description = MSXML 4.0 SP 2, Product Name = Microsoft(R) MSXML 4.0 SP 2, Product version = 4.20.9870.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2002) |1609475140|0xa6b8503687a268bfd620a12271816e36|
	  c:\PROGRA~1\mcafee\msc\mcregobj\8_0_22~1\mcregobj.dll, MID = 67100000,  ("c:\program files\mcafee\msc\mcregobj\8,0,226,0\mcregobj.dll") File version = 8,0,226,0, File size = 300368, File modification date = 01/11/2007  23:12, File description = MISP Registration Component, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1322175312|0xe8b7a11bbb7e1e47b58ba5bc69d73556|
	  c:\PROGRA~1\mcafee\msc\mcmismgr.dll, MID = 66700000,  ("c:\program files\mcafee\msc\mcmismgr.dll") File version = 8,1,149,0, File size = 431952, File modification date = 06/12/2007  19:10, File description = McAfee Misc Manager, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |556798180|0x2b160cd12b622e18ad913905845aecd4|
	  C:\PROGRA~1\McAfee\MSC\McRes.dll, MID = 67200000,  ("c:\program files\mcafee\msc\mcres.dll") File version = 8,0,226,0, File size = 80720, File modification date = 01/11/2007  23:12, File description = McAfee Non-Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1129822568|0xcf5c2cbccc496b9157a7c56da71ea6bb|
	  C:\PROGRA~1\McAfee\MSC\McLocRes.dll, MID = 66500000,  ("c:\program files\mcafee\msc\mclocres.dll") File version = 8,1,153,0, File size = 64408, File modification date = 17/06/2008  21:27, File description = McAfee Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-724153272|0x68e87bfc4f94db36f97c20ce568638a5|
	  C:\Program Files\McAfee\MSC\oem\108\Mccobres.dll, MID = 66400000,  ("c:\program files\mcafee\msc\oem\108\mccobres.dll") File version = 8,1,144,0, File size = 689472, File modification date = 06/04/2008  02:11, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |318292930|0x9d7f4ca3a8234ab97bc3424bd859801d|
	  C:\PROGRA~1\McAfee\MSC\Mccobres.dll, MID = 2340000,  ("c:\program files\mcafee\msc\mccobres.dll") File version = 8,1,165,0, File size = 690648, File modification date = 17/06/2008  21:27, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |125212792|0x5a40321e68d4417839e3caff48a010d7|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  c:\PROGRA~1\COMMON~1\mcafee\mna\mcuj.dll, MID = 6b500000,  ("c:\program files\common files\mcafee\mna\mcuj.dll") File version = 2,1,143,0, File size = 336328, File modification date = 25/01/2008  06:38, File description = McAfee Unified Join, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1263271909|0xe150df39cb8abb17627071fef8ea5376|
	  C:\PROGRA~1\McAfee\MSC\McNmcRes.dll, MID = 6b300000,  ("c:\program files\mcafee\msc\mcnmcres.dll") File version = 2,1,151,0, File size = 150928, File modification date = 18/01/2008  12:21, File description = McAfee NMC Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1654768546|0x244b30b37b46968f7dbe0748274ce6e8|
	  C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll, MID = 6b200000,  ("c:\program files\mcafee\msc\mcnmclor.dll") File version = 2,1,151,0, File size = 16568, File modification date = 18/01/2008  12:24, File description = McAfee NMC Localized Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1587310252|0x7dad4ae7938a92ad7d614e55bb82e3a3|
	  C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll, MID = 6b100000,  ("c:\program files\mcafee\msc\mcnmccor.dll") File version = 2,1,151,0, File size = 14520, File modification date = 18/01/2008  12:24, File description = McAfee NMC Co-Branded Resource DLL, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1150627641|0x2b925b6d5ee70a0686f8e1314adbd61f|
	  C:\WINDOWS\System32\netshell.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  C:\WINDOWS\System32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:11, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  C:\WINDOWS\System32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:11, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  C:\WINDOWS\System32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:11, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  C:\WINDOWS\System32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:12, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  C:\WINDOWS\System32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\System32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  C:\WINDOWS\System32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\System32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|

	PROCESS	java, PID = 440, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\WINDOWS\system32\java.exe" -Xmx100m -Djava.library.path="../lib" -classpath "../lib/agent-2.5.8318.2077-043865F4-0AD2-4D14-BA0C-9EC08525197B.jar;../lib/wrapper.jar;../lib/commons-lang-2.3.jar;../lib/commons-logging-1.1.jar;../lib/spring-2.0.6.jar;../lib/spring-ws-core-1.0.2.jar;../lib/spring-xml-1.0.2.jar;../lib/jdom-1.0.jar;../lib/jaxen-1.1.1.jar;../lib/xpp3_min-1.1.3.4.O.jar;../lib/xstream-1.2.2.jar" -Dwrapper.key="Ma0HNgq6seIhSZbO" -Dwrapper.port=32000 -Dwrapper.jvm.port.min=31000 -Dwrapper.jvm.port.max=31999 -Dwrapper.pid=188 -Dwrapper.version="3.2.3" -Dwrapper.native_library="wrapper" -Dwrapper.service="TRUE" -Dwrapper.cpu.timeout="10" -Dwrapper.jvmid=1 com.linksys.agent.Main
		  "c:\windows\system32\java.exe" File version = 6.0.110.3, File size = 144792, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1023953756|0xc583655ebbe239c50269b941384f4def|
	  C:\WINDOWS\system32\java.exe, MID = 400000,  ("c:\windows\system32\java.exe") File version = 6.0.110.3, File size = 144792, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1023953756|0xc583655ebbe239c50269b941384f4def|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\Program Files\Java\jre6\bin\msvcr71.dll, MID = 7c340000,  ("c:\program files\java\jre6\bin\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 22/02/2009  21:02, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\Program Files\Java\jre6\bin\client\jvm.dll, MID = 6d800000,  ("c:\program files\java\jre6\bin\client\jvm.dll") File version = 11.0.0.16, File size = 2359296, File modification date = 22/02/2009  21:02, File description = Java HotSpot(TM) Client VM, Product Name = Java(TM) Platform SE 6u11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright 2007) |-911044181|0xf54b27df67db75785e163f33a2dd7b9a|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\Program Files\Java\jre6\bin\hpi.dll, MID = 6d280000,  ("c:\program files\java\jre6\bin\hpi.dll") File version = 6.0.110.3, File size = 15872, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1556545030|0x7a6727d522e6260cca5b884f8b0ea1d7|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\Program Files\Java\jre6\bin\verify.dll, MID = 6d7b0000,  ("c:\program files\java\jre6\bin\verify.dll") File version = 6.0.110.3, File size = 31744, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-204183424|0x86a41ed9e019c2b78b6cd6c69187782b|
	  C:\Program Files\Java\jre6\bin\java.dll, MID = 6d320000,  ("c:\program files\java\jre6\bin\java.dll") File version = 6.0.110.3, File size = 126976, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-609943135|0xc65aa4e545682db273307095c10af6a0|
	  C:\Program Files\Java\jre6\bin\zip.dll, MID = 6d7f0000,  ("c:\program files\java\jre6\bin\zip.dll") File version = 6.0.110.3, File size = 47104, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |397319612|0x5bad9129281e1addd77f6967f38f58eb|
	  C:\WINDOWS\system32\SHELL32.DLL, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\Program Files\Java\jre6\bin\awt.dll, MID = 6d000000,  ("c:\program files\java\jre6\bin\awt.dll") File version = 6.0.110.3, File size = 1130496, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1869620852|0xaac856f555ffd7ed3112395d06f8f592|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\Program Files\Java\jre6\bin\fontmanager.dll, MID = 6d220000,  ("c:\program files\java\jre6\bin\fontmanager.dll") File version = 6.0.110.3, File size = 339968, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |914144472|0x63006ab8b94ad9673937aa98f0716ab2|
	  C:\Program Files\Linksys\Linksys Updater\lib\wrapper.dll, MID = 10000000,  ("c:\program files\linksys\linksys updater\lib\wrapper.dll") File version = (null), File size = 81920, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-2131649546|0x63e9acc3fc9e408a5907650fc78c8064|
	  C:\Program Files\Java\jre6\bin\net.dll, MID = 6d610000,  ("c:\program files\java\jre6\bin\net.dll") File version = 6.0.110.3, File size = 77824, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1015205342|0xc15143171eb21c777c5b767386171807|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|

	PROCESS	McProxy, PID = 480, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
		  "c:\program files\common files\mcafee\mcproxy\mcproxy.exe" File version = 2,0,150,0, File size = 359248, File modification date = 15/08/2007  17:36, File description = McAfee Proxy Service Module, Product Name = McAfee Proxy, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1165250198|0x8cf3da0be6094c34d7c4a85493e60547|
	  c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe, MID = 400000,  ("c:\program files\common files\mcafee\mcproxy\mcproxy.exe") File version = 2,0,150,0, File size = 359248, File modification date = 15/08/2007  17:36, File description = McAfee Proxy Service Module, Product Name = McAfee Proxy, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1165250198|0x8cf3da0be6094c34d7c4a85493e60547|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 940000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  c:\PROGRA~1\mcafee\VIRUSS~1\escnplug.dll, MID = 60300000,  ("c:\program files\mcafee\virusscan\escnplug.dll") File version = 12,1,109,0, File size = 460104, File modification date = 16/11/2007  17:36, File description = McAfee Internet email scanner plug-in module, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1217261339|0x621ff0e8917ab0fee5463c117861a460|
	  c:\PROGRA~1\mcafee\VIRUSS~1\EsPlgRes.dll, MID = 60400000,  ("c:\program files\mcafee\virusscan\esplgres.dll") File version = 12,0,188,0, File size = 14624, File modification date = 24/01/2008  12:25, File description = McAfee Internet e-mail scanner plug-in resource, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1750329940|0x8c437135fd69bb84b96b072b49e4b4a1|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvscfg.dll, MID = 61000000,  ("c:\program files\mcafee\virusscan\mvscfg.dll") File version = 12,1,118,0, File size = 324936, File modification date = 03/01/2008  12:16, File description = McAfee Configuration Object Tool, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1842676381|0x6f95acc764a3755314cce267b7f8bfaf|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\PROGRA~1\mcafee\mps\mps.dll, MID = 64500000,  ("c:\program files\mcafee\mps\mps.dll") File version = 10.1.141.0, File size = 637216, File modification date = 26/06/2008  18:05, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.141.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-966671558|0x2d4da073b04fa4b79f45abf131af14f4|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  c:\PROGRA~1\mcafee\mps\mpscfg.dll, MID = 64600000,  ("c:\program files\mcafee\mps\mpscfg.dll") File version = 10.1.137.0, File size = 472352, File modification date = 21/12/2007  20:17, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.137.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |1354445874|0x8dde39756ede7cdc8f5b14952de2d857|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\Dunzip32.dll, MID = 30000000,  ("c:\windows\system32\dunzip32.dll") File version = 5.00.06, File size = 143360, File modification date = 03/03/2006  13:07, File description = DynaZIP-32 Multi-Threading UnZIP DLL, Product Name = DynaZIP-32 Multi-Threading UnZIP DLL, Product version = 5.00.06, Company name = Inner Media, Inc. (Copyright  1995 - 2004 by Inner Media, Inc.  All Rights Reserved.) |-529275899|0xc293127e169b0f2f02bb2cbed1057471|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\mlang.dll, MID = 75cf0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 586240, File modification date = 14/04/2008  00:11, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719027136|0xb714735c12a70171de28657948fd91f1|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll, MID = 62b00000,  ("c:\program files\common files\mcafee\core\mcevtbrk.dll") File version = 3,0,115,0, File size = 267600, File modification date = 31/07/2007  05:02, File description = McAfee Event Broker, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |86852663|0x28223d573c66522cf9f9dce551747e06|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\PROGRA~1\mcafee\mps\mpsevh.dll, MID = 64200000,  ("c:\program files\mcafee\mps\mpsevh.dll") File version = 10.1.133.0, File size = 292128, File modification date = 22/11/2007  16:23, File description = McAfee Privacy Service 10.0 Event Handler, Product Name = McAfee  Privacy Service, Product version = 10.1.133.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |1808941639|0x75467a9fa13280e017cfede4d05dc8ac|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  c:\PROGRA~1\mcafee\mps\mpsmisp.dll, MID = 64400000,  ("c:\program files\mcafee\mps\mpsmisp.dll") File version = 10.1.137.0, File size = 401696, File modification date = 21/12/2007  20:16, File description = McAfee Privacy Service 10.0, Product Name = McAfee  Privacy Service, Product version = 10.1.137.0, Company name = McAfee, Inc. (Copyright  2006-2007 McAfee, Inc.) |-1446438251|0x6f647fee2c558a016bfd73cce8f4ca0f|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\Program Files\McAfee\VirusScan\mvslog.dll, MID = 61300000,  ("c:\program files\mcafee\virusscan\mvslog.dll") File version = 12,0,172,0, File size = 275784, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan Log Helper, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1105323477|0x835e11bd5df2e91f1e241d0eeb5c6e89|

	PROCESS	Mcshield, PID = 556, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\McAfee\VirusScan\McShield.exe"
		  "c:\program files\mcafee\virusscan\mcshield.exe" File version = VSCORE.14.0.0.349.x86, File size = 144704, File modification date = 24/07/2007  17:02, File description = On-Access Scanner service, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1011349640|0x33734abfa52ec8d096a1254d645e9b4f|
	  C:\Program Files\McAfee\VirusScan\McShield.exe, MID = 400000,  ("c:\program files\mcafee\virusscan\mcshield.exe") File version = VSCORE.14.0.0.349.x86, File size = 144704, File modification date = 24/07/2007  17:02, File description = On-Access Scanner service, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1011349640|0x33734abfa52ec8d096a1254d645e9b4f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\LZ32.dll, MID = 73dc0000,  ("c:\windows\system32\lz32.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 2560, File modification date = 04/08/2004  12:00, File description = LZ Expand/Compress API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1894233231|0xc3200506fb212a0f4fb736a80e646c40|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\Program Files\McAfee\VirusScan\LockDown.dll, MID = 140e0000,  ("c:\program files\mcafee\virusscan\lockdown.dll") File version = VSCORE.14.0.0.349.x86, File size = 24896, File modification date = 24/07/2007  17:02, File description = Provides self-protection functionality, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-997857597|0x0906307ab33ea67610c5f8ec588fd34f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\Program Files\McAfee\VirusScan\mytilus3.dll, MID = 14180000,  ("c:\program files\mcafee\virusscan\mytilus3.dll") File version = VSCORE.14.0.0.349.x86, File size = 66880, File modification date = 24/07/2007  17:02, File description = Common Shell3 - Scanners' interface to the 5000 series engine, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |555485130|0x77739eab2c2595dc4f4d5efedfa47945|
	  C:\Program Files\McAfee\VirusScan\mytilus3_worker.dll, MID = 14710000,  ("c:\program files\mcafee\virusscan\mytilus3_worker.dll") File version = VSCORE.14.0.0.349.x86, File size = 251200, File modification date = 24/07/2007  17:02, File description = Common Shell2 - Scanners' interface to the 5000 series engine, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1307177601|0xa03ecc2416c792241b66b93725b5eb15|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\Program Files\McAfee\VirusScan\mytilus3_server.dll, MID = 14810000,  ("c:\program files\mcafee\virusscan\mytilus3_server.dll") File version = VSCORE.14.0.0.349.x86, File size = 99648, File modification date = 24/07/2007  17:02, File description = Common Shell3 - Scanners' interface to the 5000 series engine, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |166286096|0x546df14a1661d8c80354c992767a26a8|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\Program Files\McAfee\VirusScan\RES00\McShield.dll, MID = 14100000,  ("c:\program files\mcafee\virusscan\res00\mcshield.dll") File version = VSCORE.14.0.0.349, File size = 24384, File modification date = 24/07/2007  17:02, File description = Resources for McShield, Product Name = VSCORE.14.0.0.349, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |573314787|0x1e648639bd89045a9df767276ac9731b|
	  C:\Program Files\McAfee\VirusScan\FTL.Dll, MID = 14080000,  ("c:\program files\mcafee\virusscan\ftl.dll") File version = VSCORE.14.0.0.349.x86, File size = 40768, File modification date = 24/07/2007  17:02, File description = File Filter Library, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |117149970|0xccf0d793988e55d306b38a9efe0b11df|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\Program Files\McAfee\VirusScan\naiann.dll, MID = 61900000,  ("c:\program files\mcafee\virusscan\naiann.dll") File version = 12,0,188,0, File size = 300360, File modification date = 06/11/2007  21:22, File description = McAfee VirusScan Announcer, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-149092355|0xb84bd0e69dcacf4fc772b2e6af1e0204|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mcvsps.dll, MID = 60d00000,  ("c:\program files\mcafee\virusscan\mcvsps.dll") File version = 12,0,188,0, File size = 173384, File modification date = 06/11/2007  21:22, File description = McAfee VirusScan Proxy Stub dll, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |925032733|0x82202254ad1d2f65c8b58f112accbe0d|
	  c:\PROGRA~1\mcafee\VIRUSS~1\naiannps.dll, MID = 61a00000,  ("c:\program files\mcafee\virusscan\naiannps.dll") File version = 12,0,188,0, File size = 24392, File modification date = 06/11/2007  21:22, File description = McAfee VirusScan Announcer Proxy Stub dll, Product Name = McAfee VirusScan API, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-851671091|0x0255e9cea240a664f403da759fd50954|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvscfg.dll, MID = 61000000,  ("c:\program files\mcafee\virusscan\mvscfg.dll") File version = 12,1,118,0, File size = 324936, File modification date = 03/01/2008  12:16, File description = McAfee Configuration Object Tool, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1842676381|0x6f95acc764a3755314cce267b7f8bfaf|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll, MID = 62b00000,  ("c:\program files\common files\mcafee\core\mcevtbrk.dll") File version = 3,0,115,0, File size = 267600, File modification date = 31/07/2007  05:02, File description = McAfee Event Broker, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |86852663|0x28223d573c66522cf9f9dce551747e06|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = f70000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\Program Files\McAfee\VirusScan\mvslog.dll, MID = 61300000,  ("c:\program files\mcafee\virusscan\mvslog.dll") File version = 12,0,172,0, File size = 275784, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan Log Helper, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1105323477|0x835e11bd5df2e91f1e241d0eeb5c6e89|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:12, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\Program Files\McAfee\VirusScan\Engine\5300.2777\mcscan32.dll, MID = 12000000,  ("c:\program files\mcafee\virusscan\engine\5300.2777\mcscan32.dll") File version = 5.3.00, File size = 3092646, File modification date = 09/07/2008  10:30, File description = AV Scanning Engine, Product Name = McScan, Product version = 5.3.00, Company name = McAfee, Inc. (Copyright  2008 McAfee, Inc.) |-1840345914|0x7d2db489f984628a63aa4d3703b079b4|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  C:\Program Files\McAfee\VirusScan\mfebopa.dll, MID = 603d0000,  ("c:\program files\mcafee\virusscan\mfebopa.dll") File version = SYSCORE.14.0.0.291.x86, File size = 58688, File modification date = 22/11/2007  11:43, File description = Buffer Overflow Protection Service, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1460095980|0x0fdaabc9a53555e88b97b62283e17203|
	  C:\Program Files\McAfee\VirusScan\mfehida.dll, MID = 66240000,  ("c:\program files\mcafee\virusscan\mfehida.dll") File version = SYSCORE.14.0.0.291.x86, File size = 18752, File modification date = 22/11/2007  11:43, File description = Host Intrusion Detection Link Driver Communication, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1886448004|0x009ac65799b7d717f2a3682d3c168076|
	  C:\Program Files\McAfee\VirusScan\mfeavfa.dll, MID = 6eff0000,  ("c:\program files\mcafee\virusscan\mfeavfa.dll") File version = SYSCORE.14.0.0.291.x86, File size = 58688, File modification date = 22/11/2007  11:43, File description = Anti Virus File System Filter Driver API, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1290644397|0xfb8543292619d904cbaad4ee9fa8af64|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\RASAPI32.dll, MID = 76ee0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 237056, File modification date = 14/04/2008  00:12, File description = Remote Access API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1996513756|0x92c4f48b62b0b876194584c3ff09ccb6|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e90000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |402120582|0x4def926f6a0545ae486a03c84f2ee482|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76eb0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 181760, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-741300903|0x00aabf131b4823785818db99a075a313|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132608, File modification date = 14/04/2008  00:12, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |940327720|0x0f152f4e57fdf9e8e8bdfea583a4926b|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|

	PROCESS	SiSWLSvc, PID = 1128, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe"
		  "c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\siswlsvc.exe" File version = (null), File size = 45056, File modification date = 31/12/2004  22:47, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |971795479|0xe2892f92c40807cf20b4f0132c8e0aef|
	  C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe, MID = 400000,  ("c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\siswlsvc.exe") File version = (null), File size = 45056, File modification date = 31/12/2004  22:47, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |971795479|0xe2892f92c40807cf20b4f0132c8e0aef|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|

	PROCESS	sprtsvc, PID = 1212, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe" /service /P ddoctorv2
		  "c:\program files\comcast\desktop doctor\bin\sprtsvc.exe" File version = 7.0.940.0, File size = 202560, File modification date = 24/04/2008  17:26, File description = SupportSoft Agent Service, Product Name = SupportSoft sprtsvc, Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |-1245770320|0xc3716ec0d36ad924b6888d794563e647|
	  C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe, MID = 400000,  ("c:\program files\comcast\desktop doctor\bin\sprtsvc.exe") File version = 7.0.940.0, File size = 202560, File modification date = 24/04/2008  17:26, File description = SupportSoft Agent Service, Product Name = SupportSoft sprtsvc, Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |-1245770320|0xc3716ec0d36ad924b6888d794563e647|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\Program Files\Comcast\Desktop Doctor\bin\sprtsched.dll, MID = 65ba0000,  ("c:\program files\comcast\desktop doctor\bin\sprtsched.dll") File version = 6.9.2224.0, File size = 874024, File modification date = 19/04/2007  18:21, File description = sprtsched, Product Name = SupportSoft sprtsched, Product version = 6.9.2224.0, Company name = SupportSoft, Inc. (Copyright 1997-2007 SupportSoft) |515952336|0xc3642edfe1f7fe8d2fc67d9541f7a8e6|
	  C:\Program Files\Comcast\Desktop Doctor\bin\sprtfod.dll, MID = 62b50000,  ("c:\program files\comcast\desktop doctor\bin\sprtfod.dll") File version = 6,9,2018,0, File size = 386600, File modification date = 19/04/2007  18:21, File description = sprtfod, Product Name = SupportSoft sprtfod, Product version = 6.9.2018.0, Company name = SupportSoft, Inc. (Copyright 1997-2006 SupportSoft) |1887357061|0x0a27e09ef67c8601d5922e7c13620825|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\Program Files\Comcast\Desktop Doctor\bin\LIBEAY32.dll, MID = 61f30000,  ("c:\program files\comcast\desktop doctor\bin\libeay32.dll") File version = 0.9.8b, File size = 1069056, File modification date = 19/04/2007  18:21, File description = OpenSSL Shared Library, Product Name = The OpenSSL Toolkit, Product version = 0.9.8b, Company name = The OpenSSL Project, http://www.openssl.org/ (Copyright  1998-2005 The OpenSSL Project. Copyright  1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.) |-1752327847|0xc2fa196f8dd651f04e120c7214f18fd1|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\WININET.DLL, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = b70000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\URLMON.DLL, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\Program Files\Comcast\Desktop Doctor\bin\sprtsync.dll, MID = 62c40000,  ("c:\program files\comcast\desktop doctor\bin\sprtsync.dll") File version = 7.0.940.0, File size = 861472, File modification date = 16/04/2008  15:05, File description = sprtsync, Product Name = SupportSoft SyncManager Sprocket, Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |-1058191415|0xe8b876be73b87242e1abe519e1816e29|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\Program Files\Comcast\Desktop Doctor\bin\sprtupdate.dll, MID = 65c80000,  ("c:\program files\comcast\desktop doctor\bin\sprtupdate.dll") File version = 6.9.2224.0, File size = 337448, File modification date = 19/04/2007  18:21, File description = sprtupdate, Product Name = SupportSoft sprtupdate, Product version = 6.9.2224.0, Company name = SupportSoft, Inc. (Copyright 1997-2007 SupportSoft) |2033879271|0xcbd9fa343c0786ec4e7e89a560fe14cd|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\Program Files\Bonjour\mdnsNSP.dll, MID = 16080000,  ("c:\program files\bonjour\mdnsnsp.dll") File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1610000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\rasapi32.dll, MID = 76ee0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 237056, File modification date = 14/04/2008  00:12, File description = Remote Access API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1996513756|0x92c4f48b62b0b876194584c3ff09ccb6|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e90000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |402120582|0x4def926f6a0545ae486a03c84f2ee482|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76eb0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 181760, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-741300903|0x00aabf131b4823785818db99a075a313|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\qmgrprxy.dll, MID = 5ddc0000,  ("c:\windows\system32\qmgrprxy.dll") File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 18944, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service Proxy, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1661781771|0xf1dac7969c1337af790bd1d981aa780c|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\wbem\wbemdisp.dll, MID = 5a730000,  ("c:\windows\system32\wbem\wbemdisp.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 178176, File modification date = 14/04/2008  00:12, File description = WMI Scripting, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18376818|0x880f7ed2df24db14af96c6d797958796|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74ef0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 18944, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |875370577|0x205add80ff8099b1a8101eb490b933d1|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75290000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 214528, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025270981|0xd95c71052e5ef63b55997fb31483d02f|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 75020000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 95232, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1977307769|0x3273d1565bf30225c115b480a3bb2c9d|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74ed0000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 43520, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1136134851|0x010472d0ae758227c6f6e6933549c219|
	  C:\WINDOWS\system32\wbem\fastprox.dll, MID = 75690000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 472064, File modification date = 14/04/2008  00:11, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-572631280|0x60027bea3e76d7dd8d96c02432bfde82|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:12, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76980000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 19968, File modification date = 14/04/2008  00:11, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-615224053|0x2dc5a8019e2387987905f77c664e4be2|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76990000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:12, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\ieframe.dll, MID = 42ef0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|

	PROCESS	svchost, PID = 1252, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\system32\svchost.exe -k imgsvc
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\wiaservc.dll, MID = 75aa0000,  ("c:\windows\system32\wiaservc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:12, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
	  c:\windows\system32\CFGMGR32.dll, MID = 74ae0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 16896, File modification date = 14/04/2008  00:09, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932683950|0x5f0ce62e0831cf972ec6949fd3e37da7|
	  c:\windows\system32\setupapi.DLL, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\windows\system32\mscms.dll, MID = 73b30000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), File size = 74240, File modification date = 24/06/2008  16:43, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-107861231|0x4ac2fa4a6f0df2511bac13393c06eff1|
	  c:\windows\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  c:\windows\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 680000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d40000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.5512 (xpsp.080413-2113), File size = 98304, File modification date = 14/04/2008  00:11, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1424813738|0x912b67bb8249925a5c972fc5839eae09|
	  C:\WINDOWS\system32\sti.dll, MID = 73ba0000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 68096, File modification date = 14/04/2008  00:12, File description = Still Image Devices client DLL , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |510110898|0x3caeae7608f1bd7ba873a3b02895b106|

	PROCESS	mcagent, PID = 1820, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = c:\PROGRA~1\mcafee.com\agent\mcagent.exe -Embedding
		  "c:\program files\mcafee.com\agent\mcagent.exe" File version = 8,0,237,0, File size = 582992, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1714725955|0x9405b452064bfa6a0f78e2f177a988a4|
	  c:\PROGRA~1\mcafee.com\agent\mcagent.exe, MID = 400000,  ("c:\program files\mcafee.com\agent\mcagent.exe") File version = 8,0,237,0, File size = 582992, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1714725955|0x9405b452064bfa6a0f78e2f177a988a4|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 340000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\PROGRA~1\McAfee\MSC\McRes.dll, MID = 67200000,  ("c:\program files\mcafee\msc\mcres.dll") File version = 8,0,226,0, File size = 80720, File modification date = 01/11/2007  23:12, File description = McAfee Non-Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1129822568|0xcf5c2cbccc496b9157a7c56da71ea6bb|
	  C:\PROGRA~1\McAfee\MSC\McLocRes.dll, MID = 66500000,  ("c:\program files\mcafee\msc\mclocres.dll") File version = 8,1,153,0, File size = 64408, File modification date = 17/06/2008  21:27, File description = McAfee Localized Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-724153272|0x68e87bfc4f94db36f97c20ce568638a5|
	  C:\Program Files\McAfee\MSC\oem\108\Mccobres.dll, MID = 66400000,  ("c:\program files\mcafee\msc\oem\108\mccobres.dll") File version = 8,1,144,0, File size = 689472, File modification date = 06/04/2008  02:11, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |318292930|0x9d7f4ca3a8234ab97bc3424bd859801d|
	  C:\PROGRA~1\McAfee\MSC\Mccobres.dll, MID = ca0000,  ("c:\program files\mcafee\msc\mccobres.dll") File version = 8,1,165,0, File size = 690648, File modification date = 17/06/2008  21:27, File description = McAfee Co-Branded Resource DLL, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |125212792|0x5a40321e68d4417839e3caff48a010d7|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\PROGRA~1\mcafee\msc\mcregobj\8_0_22~1\mcregobj.dll, MID = 67100000,  ("c:\program files\mcafee\msc\mcregobj\8,0,226,0\mcregobj.dll") File version = 8,0,226,0, File size = 300368, File modification date = 01/11/2007  23:12, File description = MISP Registration Component, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1322175312|0xe8b7a11bbb7e1e47b58ba5bc69d73556|
	  c:\WINDOWS\system32\msxml4.dll, MID = 69b10000,  ("c:\windows\system32\msxml4.dll") File version = 4.20.9870.0, File size = 1286152, File modification date = 30/09/2008  21:43, File description = MSXML 4.0 SP 2, Product Name = Microsoft(R) MSXML 4.0 SP 2, Product version = 4.20.9870.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2002) |1609475140|0xa6b8503687a268bfd620a12271816e36|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1630000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  C:\WINDOWS\system32\winhttp.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  c:\PROGRA~1\mcafee.com\agent\mcagntps.dll, MID = 66000000,  ("c:\program files\mcafee.com\agent\mcagntps.dll") File version = 8,0,226,0, File size = 66896, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1733621807|0x34b8ecdba9b8806578dd3770264e2702|
	  c:\PROGRA~1\mcafee\msc\mccfgpv.dll, MID = 66300000,  ("c:\program files\mcafee\msc\mccfgpv.dll") File version = 8,1,133,0, File size = 425808, File modification date = 02/11/2007  03:31, File description = MISP Default Configuration Provider, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1174477467|0xcc2ca1aa9623a737ef4905271b3fc62d|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ee0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 237056, File modification date = 14/04/2008  00:12, File description = Remote Access API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1996513756|0x92c4f48b62b0b876194584c3ff09ccb6|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e90000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |402120582|0x4def926f6a0545ae486a03c84f2ee482|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76eb0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 181760, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-741300903|0x00aabf131b4823785818db99a075a313|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  c:\PROGRA~1\mcafee\msc\mcuicfg.dll, MID = 67600000,  ("c:\program files\mcafee\msc\mcuicfg.dll") File version = 8,0,226,0, File size = 116048, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-763052641|0x6808762c4fc147c6d8af1ce3e9267517|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	alg, PID = 2364, USER = , Command Line = C:\WINDOWS\System32\alg.exe
		  "c:\windows\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	  C:\WINDOWS\System32\alg.exe, MID = 1000000,  ("c:\windows\system32\alg.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\System32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:12, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\System32\MSWSOCK.DLL, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 680000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|

	PROCESS	atiptaxx, PID = 2580, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" 
		  "c:\program files\ati technologies\ati control panel\atiptaxx.exe" File version = 6.14.10.4002, File size = 294912, File modification date = 08/11/2002  02:00, File description = ATI Desktop Control Panel, Product Name = ATI Desktop Component, Product version = 6.14.10.4002, Company name = ATI Technologies, Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |-2004664167|0x6c1d510033af5d12a5c00565bcc28051|
	  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe, MID = 400000,  ("c:\program files\ati technologies\ati control panel\atiptaxx.exe") File version = 6.14.10.4002, File size = 294912, File modification date = 08/11/2002  02:00, File description = ATI Desktop Control Panel, Product Name = ATI Desktop Component, Product version = 6.14.10.4002, Company name = ATI Technologies, Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |-2004664167|0x6c1d510033af5d12a5c00565bcc28051|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.ENU, MID = 10000000,  ("c:\program files\ati technologies\ati control panel\atrpuixx.enu") File version = 6.14.10.4002, File size = 102400, File modification date = 08/11/2002  02:00, File description = ATI Desktop Control Panel, Product Name = ATI Desktop Component, Product version = 6.14.10.4002, Company name = ATI Technologies, Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |1342374288|0x97b059fb84f04ca3a4266658d203c512|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll, MID = 970000,  ("c:\program files\ati technologies\ati control panel\atipdsxx.dll") File version = 6.14.10.4002, File size = 221262, File modification date = 08/11/2002  02:00, File description = ATI Desktop Control Panel, Product Name = ATI Desktop Component, Product version = 6.14.10.4002, Company name = ATI Technologies, Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |126458116|0xdb817628cb74d988763f5fa92c1c2f9f|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	jusched, PID = 2600, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\Java\jre6\bin\jusched.exe" 
		  "c:\program files\java\jre6\bin\jusched.exe" File version = 6.0.110.3, File size = 136600, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |1052156513|0xb98ffa8288efaabc436c30d198608345|
	  C:\Program Files\Java\jre6\bin\jusched.exe, MID = 400000,  ("c:\program files\java\jre6\bin\jusched.exe") File version = 6.0.110.3, File size = 136600, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |1052156513|0xb98ffa8288efaabc436c30d198608345|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 340000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|

	PROCESS	Directcd, PID = 2608, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" 
		  "c:\program files\roxio\easy cd creator 5\directcd\directcd.exe" File version = 5.3.4.21, File size = 684032, File modification date = 17/12/2002  17:28, File description = DirectCD Application, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |1772671083|0xbe3238a165afb321f1696cc1ff9ef271|
	  C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe, MID = 400000,  ("c:\program files\roxio\easy cd creator 5\directcd\directcd.exe") File version = 5.3.4.21, File size = 684032, File modification date = 17/12/2002  17:28, File description = DirectCD Application, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |1772671083|0xbe3238a165afb321f1696cc1ff9ef271|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\CDUDFLIB.dll, MID = 10000000,  ("c:\program files\roxio\easy cd creator 5\directcd\cdudflib.dll") File version = 5.3.4.21, File size = 217088, File modification date = 17/12/2002  17:27, File description = DirectCD Library, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |-1986665627|0x5c108285912bf248466129efd255b219|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\UDFRWLIB.dll, MID = 330000,  ("c:\program files\roxio\easy cd creator 5\directcd\udfrwlib.dll") File version = 5.3.4.21, File size = 86016, File modification date = 17/12/2002  17:27, File description = DirectCD Rewritable Library, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |-969719223|0x428edc561bb77711633e50e569b75769|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\oledlg.dll, MID = 7df70000,  ("c:\windows\system32\oledlg.dll") File version = 1.0 (xpsp.080413-2108), File size = 122880, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product Name = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product version = 2.01, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1952800084|0x0b467f470cc9918fdceedcfd7dc4d697|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEPRO32.DLL, MID = 5edd0000,  ("c:\windows\system32\olepro32.dll") File version = 5.1.2600.5512, File size = 84992, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |251422097|0x5652f6ce1d9e9d8068b9d29bc21b5409|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	vVX1000, PID = 2620, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\WINDOWS\vVX1000.exe" 
		  "c:\windows\vvx1000.exe" File version = 1, 1, 4, 3, File size = 709992, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam Device Application, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |98603662|0xf9825069752b43ca98974b71a9b4dcf5|
	  C:\WINDOWS\vVX1000.exe, MID = 400000,  ("c:\windows\vvx1000.exe") File version = 1, 1, 4, 3, File size = 709992, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam Device Application, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |98603662|0xf9825069752b43ca98974b71a9b4dcf5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\oledlg.dll, MID = 7df70000,  ("c:\windows\system32\oledlg.dll") File version = 1.0 (xpsp.080413-2108), File size = 122880, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product Name = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product version = 2.01, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1952800084|0x0b467f470cc9918fdceedcfd7dc4d697|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	Gear511, PID = 2628, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe" -hide
		  "c:\program files\netgear\wg511scu\utility\gear511.exe" File version = 2, 52, 29, 4, File size = 1122412, File modification date = 20/01/2006  20:14, File description = NetgearRev MFC Application, Product Name =   NetgearRev Application, Product version = 2, 52, 29, 4, Company name =   (Copyright 2006) |1298360066|0xa7379f1702604a9167face01f881dcdb|
	  C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe, MID = 400000,  ("c:\program files\netgear\wg511scu\utility\gear511.exe") File version = 2, 52, 29, 4, File size = 1122412, File modification date = 20/01/2006  20:14, File description = NetgearRev MFC Application, Product Name =   NetgearRev Application, Product version = 2, 52, 29, 4, Company name =   (Copyright 2006) |1298360066|0xa7379f1702604a9167face01f881dcdb|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\AW32N50.dll, MID = 10000000,  ("c:\windows\system32\aw32n50.dll") File version = 5.00.13.50, File size = 73728, File modification date = 12/04/2002  16:06, File description = AWinDis 32 API & Platform Compatibility DLL, Product Name = AMBIT WinDis32 DLL for Windows, Product version = 5.00.13.50, Company name = AMBIT Microsystems Corporation. (Copyright  2002 AMBIT Microsystems Corporation.) |77595607|0xba317f683fc553ce9b2cf867d3dc55fa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\Program Files\NETGEAR\WG511SCU\Utility\MFC42.DLL, MID = 73dd0000,  ("c:\program files\netgear\wg511scu\utility\mfc42.dll") File version = 6.00.8665.0, File size = 995383, File modification date = 14/09/2005  14:51, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.0.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |426405653|0x2e9656044fe42ac91e6ee49dc47a5472|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\Program Files\NETGEAR\WG511SCU\Utility\AegisE5.dll, MID = 520000,  ("c:\program files\netgear\wg511scu\utility\aegise5.dll") File version = 3, 0, 1, 33, File size = 1396830, File modification date = 27/12/2004  23:04, File description = IEEE 802.1X Protocol, Product Name = AEGIS Client API, Product version = 3, 0, 1, 33, Company name = Meetinghouse Data Communications (Copyright  Meetinghouse Data Communications 1997-2004) |-95430034|0xf17b5a19c67fb73e0c74572bc68d3b3d|
	  C:\WINDOWS\system32\WinSCard.dll, MID = 723d0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 99328, File modification date = 14/04/2008  00:12, File description = Microsoft Smart Card API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1234730488|0x02988b904c386b500cd08639c4c20eea|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 5fd00000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8168.0, File size = 53248, File modification date = 17/06/1998  22:08, File description = MFC Language Specific Resources, Product Name = Microsoft (R) Visual C++, Product version = 6.0.000, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |120996387|0xc272bfd418d3398a9f18e4a764f00629|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\Program Files\NETGEAR\WG511SCU\Utility\UIResource.dll, MID = c50000,  ("c:\program files\netgear\wg511scu\utility\uiresource.dll") File version = (null), File size = 659456, File modification date = 17/01/2006  23:52, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-393787259|0x901b2135f5455dea47ef5a1d961aafcf|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\DHCPCSVC.DLL, MID = 7d4b0000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|

	PROCESS	ctfmon, PID = 2684, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\WINDOWS\system32\ctfmon.exe" 
		  "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:12, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
	  C:\WINDOWS\system32\ctfmon.exe, MID = 400000,  ("c:\windows\system32\ctfmon.exe") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:12, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\MSUTB.dll, MID = 5fc10000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 195072, File modification date = 14/04/2008  00:12, File description = MSUTB Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |967891665|0x17aa58a54c00f1746b8654c050491f43|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|

	PROCESS	I8kfanGUI, PID = 2696, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\I8kfanGUI\I8kfanGUI.exe" /startup
		  "c:\program files\i8kfangui\i8kfangui.exe" File version = 3.0, File size = 847872, File modification date = 30/11/2006  21:03, File description = Dell Inspiron/Latitude/Precision fan control, Product Name = I8kfanGUI Application, Product version = 3.0, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |1283842115|0x584ad7b3a83befc193a316b931796f77|
	  C:\Program Files\I8kfanGUI\I8kfanGUI.exe, MID = 400000,  ("c:\program files\i8kfangui\i8kfangui.exe") File version = 3.0, File size = 847872, File modification date = 30/11/2006  21:03, File description = Dell Inspiron/Latitude/Precision fan control, Product Name = I8kfanGUI Application, Product version = 3.0, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |1283842115|0x584ad7b3a83befc193a316b931796f77|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\powrprof.dll, MID = 74ad0000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 17408, File modification date = 14/04/2008  00:12, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662701231|0x50a166237a0fa771261275a405646cc0|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|

	PROCESS	OLFSNT40, PID = 2812, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE" 
		  "c:\program files\microsoft office\office\1033\olfsnt40.exe" File version = 9.0.98.0105, File size = 45568, File modification date = 23/12/1998  13:51, File description = Symantec Fax Starter Edition Port Launcher, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |1879030107|0x60fdd0fcf620deb6ac1f5fbedb659489|
	  C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE, MID = 1000000,  ("c:\program files\microsoft office\office\1033\olfsnt40.exe") File version = 9.0.98.0105, File size = 45568, File modification date = 23/12/1998  13:51, File description = Symantec Fax Starter Edition Port Launcher, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |1879030107|0x60fdd0fcf620deb6ac1f5fbedb659489|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|

	PROCESS	WlanCU, PID = 2840, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe" 
		  "c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\wlancu.exe" File version = 2, 0, 9, 300, File size = 458752, File modification date = 25/01/2005  20:41, File description = ClientCU MFC Application, Product Name = ClientCU Application, Product version = 1, 0, 0, 1, Company name =  (Copyright (C) 2003) |-1431902076|0x1cafa4f9ef139ece8d4e2d7e124b7400|
	  C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe, MID = 400000,  ("c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\wlancu.exe") File version = 2, 0, 9, 300, File size = 458752, File modification date = 25/01/2005  20:41, File description = ClientCU MFC Application, Product Name = ClientCU Application, Product version = 1, 0, 0, 1, Company name =  (Copyright (C) 2003) |-1431902076|0x1cafa4f9ef139ece8d4e2d7e124b7400|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanDll.dll, MID = 10000000,  ("c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\wlandll.dll") File version = 300, 32, 110, 126, File size = 45056, File modification date = 26/01/2005  22:19, File description = WlanDll DLL, Product Name = WlanDll Dynamic Link Library, Product version = 1, 0, 0, 10, Company name =  (Copyright (C) 2003) |-2053122054|0x3c8dee81aa062c038404c5130c446833|
	  C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSPkt.dll, MID = 330000,  ("c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\sispkt.dll") File version = 1, 0, 0, 39, File size = 299008, File modification date = 31/12/2004  22:47, File description = SiSPkt, Product Name = SiS160 Series Wireless LAN Adapter, Product version = 1, 0, 0, 39, Company name = Silicon Integrated Systems Corp. (Copyright c 2004) |1362898365|0x046c0ebbb89f2d3e674b6665a3a9b596|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\Protect.DLL, MID = 380000,  ("c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\protect.dll") File version = 1, 0, 0, 2, File size = 49152, File modification date = 27/09/2004  19:54, File description = Protect, Product Name = sis Protect, Product version = 1, 0, 0, 2, Company name = sis (Copyright c 2003) |-1482336149|0x0b568a746660ed82d076099886ec0d0c|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\MFC42.DLL, MID = 73dd0000,  ("c:\windows\system32\mfc42.dll") File version = 6.02.4131.0, File size = 1028096, File modification date = 14/04/2008  00:11, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |-74760215|0x6807b4dd2ccf60745c1333d6c17de173|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\oledlg.dll, MID = 7df70000,  ("c:\windows\system32\oledlg.dll") File version = 1.0 (xpsp.080413-2108), File size = 122880, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product Name = Microsoft Windows(TM) OLE 2.0 User Interface Support, Product version = 2.01, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1952800084|0x0b467f470cc9918fdceedcfd7dc4d697|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEPRO32.DLL, MID = 5edd0000,  ("c:\windows\system32\olepro32.dll") File version = 5.1.2600.5512, File size = 84992, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |251422097|0x5652f6ce1d9e9d8068b9d29bc21b5409|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 5fd00000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8168.0, File size = 53248, File modification date = 17/06/1998  22:08, File description = MFC Language Specific Resources, Product Name = Microsoft (R) Visual C++, Product version = 6.0.000, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |120996387|0xc272bfd418d3398a9f18e4a764f00629|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|

	PROCESS	mcsysmon, PID = 2924, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
		  "c:\program files\mcafee\virusscan\mcsysmon.exe" File version = 12,1,111,0, File size = 695624, File modification date = 05/12/2007  15:04, File description = McAfee SystemGuards Service, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1764132594|0xfd47df2bcc3544df65b01ad6b6062430|
	  C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe, MID = 400000,  ("c:\program files\mcafee\virusscan\mcsysmon.exe") File version = 12,1,111,0, File size = 695624, File modification date = 05/12/2007  15:04, File description = McAfee SystemGuards Service, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1764132594|0xfd47df2bcc3544df65b01ad6b6062430|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 970000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll, MID = 61300000,  ("c:\program files\mcafee\virusscan\mvslog.dll") File version = 12,0,172,0, File size = 275784, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan Log Helper, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1105323477|0x835e11bd5df2e91f1e241d0eeb5c6e89|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  C:\PROGRA~1\McAfee\VIRUSS~1\mfesmfa.dll, MID = 6a830000,  ("c:\program files\mcafee\virusscan\mfesmfa.dll") File version = SYSCORE.14.0.0.291.x86, File size = 17216, File modification date = 22/11/2007  11:44, File description = System Monitor Filter Driver API, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1689204463|0xaf711d24b9180babe04e4a80a57f6219|
	  C:\PROGRA~1\McAfee\VIRUSS~1\mfehida.dll, MID = 66240000,  ("c:\program files\mcafee\virusscan\mfehida.dll") File version = SYSCORE.14.0.0.291.x86, File size = 18752, File modification date = 22/11/2007  11:43, File description = Host Intrusion Detection Link Driver Communication, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1886448004|0x009ac65799b7d717f2a3682d3c168076|
	  c:\PROGRA~1\COMMON~1\mcafee\HACKER~1\hwapi.dll, MID = 62e00000,  ("c:\program files\common files\mcafee\hackerwatch\hwapi.dll") File version = 9.0.119.0, File size = 620648, File modification date = 18/06/2007  15:41, File description = McAfee HackerWatch, Product Name = McAfee HackerWatch, Product version = 9.0.119.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |245985810|0xd07f2ba1451ae4f97985a2870f682a8e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\winhttp.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  c:\PROGRA~1\mcafee\VIRUSS~1\mvscfg.dll, MID = 61000000,  ("c:\program files\mcafee\virusscan\mvscfg.dll") File version = 12,1,118,0, File size = 324936, File modification date = 03/01/2008  12:16, File description = McAfee Configuration Object Tool, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1842676381|0x6f95acc764a3755314cce267b7f8bfaf|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:12, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  c:\PROGRA~1\mcafee\msc\mcsubmgr\8_1_13~1\mcsubmgr.dll, MID = 67500000,  ("c:\program files\mcafee\msc\mcsubmgr\8,1,133,0\mcsubmgr.dll") File version = 8,1,133,0, File size = 492880, File modification date = 02/11/2007  03:32, File description = McAfee Subscription manager module, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1563158260|0x52b6e1ba4dcc3f22842c0aee499f4a22|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mccoreps.dll, MID = 62a00000,  ("c:\program files\common files\mcafee\core\mccoreps.dll") File version = 3,0,115,0, File size = 90968, File modification date = 31/07/2007  05:02, File description = McAfee Core Proxy Stub, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-660636187|0x19e0fbd24cb1a016e035bc1a526aa1ed|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|

	PROCESS	MpfSrv, PID = 3900, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = "C:\Program Files\McAfee\MPF\MPFSrv.exe"
		  "c:\program files\mcafee\mpf\mpfsrv.exe" File version = 9.0.136.0, File size = 856864, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Service, Product Name = McAfee Personal Firewall, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1578675555|0x346f30f1ff73553aa466f4ae7948da00|
	  C:\Program Files\McAfee\MPF\MPFSrv.exe, MID = 400000,  ("c:\program files\mcafee\mpf\mpfsrv.exe") File version = 9.0.136.0, File size = 856864, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Service, Product Name = McAfee Personal Firewall, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1578675555|0x346f30f1ff73553aa466f4ae7948da00|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  c:\PROGRA~1\COMMON~1\mcafee\HACKER~1\hwapi.dll, MID = 62e00000,  ("c:\program files\common files\mcafee\hackerwatch\hwapi.dll") File version = 9.0.119.0, File size = 620648, File modification date = 18/06/2007  15:41, File description = McAfee HackerWatch, Product Name = McAfee HackerWatch, Product version = 9.0.119.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |245985810|0xd07f2ba1451ae4f97985a2870f682a8e|
	  C:\WINDOWS\system32\winhttp.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 354304, File modification date = 14/04/2008  00:12, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1720207291|0xd29f2889baa10e19ad9ff70c8d5ecf50|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:11, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  17:37, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1570000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\userenv.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\System32\netshell.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  C:\WINDOWS\System32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\System32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:11, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  C:\WINDOWS\System32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:11, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  C:\WINDOWS\System32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:12, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\System32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:11, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  C:\WINDOWS\System32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:12, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  C:\WINDOWS\System32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:12, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\System32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  C:\WINDOWS\System32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:12, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\System32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|
	  C:\WINDOWS\System32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:11, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll, MID = 62b00000,  ("c:\program files\common files\mcafee\core\mcevtbrk.dll") File version = 3,0,115,0, File size = 267600, File modification date = 31/07/2007  05:02, File description = McAfee Event Broker, Product Name = McAfee Core API, Product version = 3,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |86852663|0x28223d573c66522cf9f9dce551747e06|
	  c:\PROGRA~1\mcafee\mpf\mc\mpfmisp.dll, MID = 63400000,  ("c:\program files\mcafee\mpf\mc\mpfmisp.dll") File version = 9.0.136.0, File size = 1047328, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Plus, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1765866144|0x973411647a7fe64a78a463640969ea9d|
	  C:\WINDOWS\system32\COMDLG32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\WININET.dll, MID = 78050000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 826368, File modification date = 20/12/2008  23:15, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-112302289|0xa82935d32d0672e8ff4e91ae398e901c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 2370000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  14:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 78000000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 267776, File modification date = 20/12/2008  23:15, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1876314748|0xf9ad085eb1392dc9efb7698b681c22a2|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76380000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 4608, File modification date = 14/04/2008  00:11, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1879070734|0xaffc87e2501fce8f09d4c10ba6421ccf|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 1160192, File modification date = 20/12/2008  23:15, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1852281277|0x045fd1fdf0df2f4ada825b6484720c8d|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  c:\PROGRA~1\mcafee\msc\mcmispps.dll, MID = 66a00000,  ("c:\program files\mcafee\msc\mcmispps.dll") File version = 8,0,226,0, File size = 168272, File modification date = 01/11/2007  23:12, File description = McAfee MISP Proxy Stub DLL, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1902774413|0x71987b191f2fd94cecdf29c3c599d3cb|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:11, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  C:\WINDOWS\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:11, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  C:\WINDOWS\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:11, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:12, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\Program Files\Bonjour\mdnsNSP.dll, MID = 16080000,  ("c:\program files\bonjour\mdnsnsp.dll") File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  c:\WINDOWS\system32\msxml4.dll, MID = 69b10000,  ("c:\windows\system32\msxml4.dll") File version = 4.20.9870.0, File size = 1286152, File modification date = 30/09/2008  21:43, File description = MSXML 4.0 SP 2, Product Name = Microsoft(R) MSXML 4.0 SP 2, Product version = 4.20.9870.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2002) |1609475140|0xa6b8503687a268bfd620a12271816e36|

	PROCESS	svchost, PID = 796, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, Everyone, NT AUTHORITY\Authenticated Users), Command Line = C:\WINDOWS\System32\svchost.exe -k HTTPFilter
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:12, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:11, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:11, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:12, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:12, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 660000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\w3ssl.dll, MID = 5aa90000,  ("c:\windows\system32\w3ssl.dll") File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:12, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
	  C:\WINDOWS\System32\strmfilt.dll, MID = 6f290000,  ("c:\windows\system32\strmfilt.dll") File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 75776, File modification date = 14/04/2008  00:12, File description = Stream Filter Library, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1357513435|0xe5786e13f8c86427a2062c009eed4ed9|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\System32\HTTPAPI.dll, MID = 67570000,  ("c:\windows\system32\httpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:11, File description = HTTP Protocol Stack API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-65895855|0x144840418c0b702852f269ea6faa8c17|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|

	PROCESS	GetSystemInfo, PID = 2776, USER = AMIT\**** (Group - AMIT\None, Everyone, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\INTERACTIVE, NT AUTHORITY\Authenticated Users, LOCAL), Command Line = "C:\Documents and Settings\****\Desktop\getsysteminfo\GetSystemInfo.exe" 
		  "c:\documents and settings\****\desktop\getsysteminfo\getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 11/03/2009  14:28, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\Documents and Settings\****\Desktop\getsysteminfo\GetSystemInfo.exe, MID = 400000,  ("c:\documents and settings\****\desktop\getsysteminfo\getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 11/03/2009  14:28, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 706048, File modification date = 14/04/2008  00:11, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2031441402|0x27d9ed8cb8b62d1e0a8e5ace6cf52e2f|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 989696, File modification date = 14/04/2008  00:11, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1731397213|0xc24b983d211c34da8fcc1ac38477971d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:12, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:12, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 584704, File modification date = 14/04/2008  00:12, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2028753115|0xb979d9d1c8073da21a7f80345f306a1d|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 56320, File modification date = 14/04/2008  00:12, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |632276113|0x7459c16cc3ef4651cab7c9260e43fc58|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:12, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:11, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:11, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:12, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:12, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:12, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:12, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:11, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:12, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\Msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:11, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:12, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:11, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:10, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:12, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:11, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:11, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:12, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:12, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  09:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76990000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:12, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 14/04/2008  00:11, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-297608188|0x14ee0e012e7298fc1448a88e9fe53322|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:11, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:12, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:11, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:11, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f60000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:11, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |331693154|0x2de1190196ee9555db548a57622022eb|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71c10000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 44032, File modification date = 14/04/2008  00:12, File description = Microsoft Lan Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1703319395|0x36468087e22c57a83df758b3f90df73f|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cd0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = NT LM UI Common Code - GUI Classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-286856417|0xac5df42fe314c1446b1dad237bfcffe0|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c90000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 245760, File modification date = 14/04/2008  00:12, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |841396087|0xed5a816d8e11e03f1937ac3c56826ee4|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:12, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:12, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f70000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:11, File description = Web DAV Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |325003362|0xfb8f8eec8d9c2157789472dd61cdc78b|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75970000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 997376, File modification date = 14/04/2008  00:11, File description = Windows NT Logon GINA DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |609505261|0xd7b7a57c0e57c836f18cf12a4c62a1ca|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 74320000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1657068939|0x52a5a388661ff3a889593185367b7226|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:12, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\odbcint.dll, MID = 1440000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 94208, File modification date = 13/04/2008  17:26, File description = Microsoft Data Access - ODBC Resources, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1903028116|0x6b7c6b32f8e84d56c6260d684019fea2|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1500000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  17:39, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5e750000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 34816, File modification date = 14/04/2008  00:12, File description = Windows System Process Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1156794191|0x1793cc660605f63b14fb96c7707f75ba|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:12, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):amit/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1056, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	TCP, LOCAL (host/address/port):amit/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):amit/0.0.0.0/2869, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1204, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	TCP, LOCAL (host/address/port):amit/0.0.0.0/6646, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 420, Command Line = "c:\progra~1\common~1\mcafee\mna\mcnasvc.exe"   "c:\program files\common files\mcafee\mna\mcnasvc.exe" File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/1026, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 2364, Command Line = c:\windows\system32\alg.exe   "c:\windows\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/2280, REMOTE (host/address/port):amit/127.0.0.1/2279, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit/127.0.0.1/5152, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 192, Command Line = "c:\program files\java\jre6\bin\jqs.exe" -service -config "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf"   "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/5152, REMOTE (host/address/port):amit/127.0.0.1/3197, State:CLOSE_WAIT, PID = 192, Command Line = "c:\program files\java\jre6\bin\jqs.exe" -service -config "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf"   "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/5354, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 2008, Command Line = "c:\program files\bonjour\mdnsresponder.exe"   "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/27015, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1976, Command Line = "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe"   "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" File version = 2.11.32.0, File size = 116040, File modification date = 01/10/2008  17:06, File description = Apple Mobile Device Service, Product Name = Apple Mobile Device Service, Product version = 2.11.32.0, Company name = Apple Inc. ( 2007-2008 Apple Inc. All Rights Reserved.) |1186677590|0xb8e865d24f2753a35cc2a9a6a3ce1ad4|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/31000, REMOTE (host/address/port):amit/127.0.0.1/32000, State:ESTABLISHED, PID = 440, Command Line = "c:\windows\system32\java.exe" -xmx100m -djava.library.path="../lib" -classpath "../lib/agent-2.5.8318.2077-043865f4-0ad2-4d14-ba0c-9ec08525197b.jar;../lib/wrapper.jar;../lib/commons-lang-2.3.jar;../lib/commons-logging-1.1.jar;../lib/spring-2.0.6.jar;../lib/spring-ws-core-1.0.2.jar;../lib/spring-xml-1.0.2.jar;../lib/jdom-1.0.jar;../lib/jaxen-1.1.1.jar;../lib/xpp3_min-1.1.3.4.o.jar;../lib/xstream-1.2.2.jar" -dwrapper.key="ma0hngq6seihszbo" -dwrapper.port=32000 -dwrapper.jvm.port.min=31000 -dwrapper.jvm.port.max=31999 -dwrapper.pid=188 -dwrapper.version="3.2.3" -dwrapper.native_library="wrapper" -dwrapper.service="true" -dwrapper.cpu.timeout="10" -dwrapper.jvmid=1 com.linksys.agent.main   "c:\windows\system32\java.exe" File version = 6.0.110.3, File size = 144792, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1023953756|0xc583655ebbe239c50269b941384f4def|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/32000, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 188, Command Line = "c:\program files\linksys\linksys updater\bin\linksysupdater.exe"  -s "c:\program files\linksys\linksys updater\conf\wrapper.conf"   "c:\program files\linksys\linksys updater\bin\linksysupdater.exe" File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
	TCP, LOCAL (host/address/port):amit/127.0.0.1/32000, REMOTE (host/address/port):amit/127.0.0.1/31000, State:ESTABLISHED, PID = 188, Command Line = "c:\program files\linksys\linksys updater\bin\linksysupdater.exe"  -s "c:\program files\linksys\linksys updater\conf\wrapper.conf"   "c:\program files\linksys\linksys updater\bin\linksysupdater.exe" File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/139(netbios-ssn), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3118, REMOTE (host/address/port):*/66.201.116.13/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3229, REMOTE (host/address/port):*/8.17.64.87/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3305, REMOTE (host/address/port):ww.smashits.com/66.28.9.254/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3366, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3367, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3375, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3376, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3377, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3378, REMOTE (host/address/port):images.smashits.com/66.28.9.253/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3465, REMOTE (host/address/port):a96-17-74-90.deploy.akamaitechnologies.com/96.17.74.90/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3475, REMOTE (host/address/port):rd.apmebf.com/63.215.202.21/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3483, REMOTE (host/address/port):./67.159.26.98/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3496, REMOTE (host/address/port):*/66.28.221.250/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3498, REMOTE (host/address/port):media.fastclick.net/63.215.202.17/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3499, REMOTE (host/address/port):rd.apmebf.com/63.215.202.21/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3500, REMOTE (host/address/port):a96-17-75-11.deploy.akamaitechnologies.com/96.17.75.11/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3501, REMOTE (host/address/port):a96-17-75-11.deploy.akamaitechnologies.com/96.17.75.11/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3502, REMOTE (host/address/port):E.ROOT-SERVERS.NET/192.203.230.10/53(domain), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3503, REMOTE (host/address/port):ww.smashits.com/66.28.9.254/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3507, REMOTE (host/address/port):ww.smashits.com/66.28.9.254/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3508, REMOTE (host/address/port):media.fastclick.net/63.215.202.17/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3509, REMOTE (host/address/port):rd.apmebf.com/63.215.202.21/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/3513, REMOTE (host/address/port):f.root-servers.net/192.5.5.241/53(domain), State:TIME_WAIT, PID = 0, Command Line = (null) 
	UDP, LOCAL (host/address/port):amit/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):amit/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 824, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	UDP, LOCAL (host/address/port):amit/0.0.0.0/1025, REMOTE (host/address/port):*/*/*, State:*, PID = 2008, Command Line = "c:\program files\bonjour\mdnsresponder.exe"   "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	UDP, LOCAL (host/address/port):amit/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 824, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	UDP, LOCAL (host/address/port):amit/0.0.0.0/53497, REMOTE (host/address/port):*/*/*, State:*, PID = 2008, Command Line = "c:\program files\bonjour\mdnsresponder.exe"   "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	UDP, LOCAL (host/address/port):amit/127.0.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1092, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):amit/127.0.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1204, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):amit/127.0.0.1/2169, REMOTE (host/address/port):*/*/*, State:*, PID = 1092, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1092, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/137(netbios-ns), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/138, REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1204, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/5353, REMOTE (host/address/port):*/*/*, State:*, PID = 2008, Command Line = "c:\program files\bonjour\mdnsresponder.exe"   "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
	UDP, LOCAL (host/address/port):amit.hsd1.ga.comcast.net./192.168.1.100/6646, REMOTE (host/address/port):*/*/*, State:*, PID = 420, Command Line = "c:\progra~1\common~1\mcafee\mna\mcnasvc.exe"   "c:\program files\common files\mcafee\mna\mcnasvc.exe" File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|

System default language:
		English

Default interface language of user:
		English

Keyboard layout languages:
		English

Installed code pages:
		10000 = 10000 (MAC - Roman)
		10006 = 10006 (MAC - Greek I)
		10007 = 10007 (MAC - Cyrillic)
		10010 = 10010 (MAC - Romania)
		10017 = 10017 (MAC - Ukraine)
		10029 = 10029 (MAC - Latin II)
		10079 = 10079 (MAC - Icelandic)
		10081 = 10081 (MAC - Turkish)
		10082 = 10082 (MAC - Croatia)
		1026 = 1026  (IBM EBCDIC - Turkish (Latin-5))
		1250 = 1250  (ANSI - Central Europe)
		1251 = 1251  (ANSI - Cyrillic)
		1252 = 1252  (ANSI - Latin I)
		1253 = 1253  (ANSI - Greek)
		1254 = 1254  (ANSI - Turkish)
		1255 = 1255  (ANSI - Hebrew)
		1256 = 1256  (ANSI - Arabic)
		1257 = 1257  (ANSI - Baltic)
		1258 = 1258  (ANSI/OEM - Viet Nam)
		1361 = Korean (Johab)
		20127 = 20127 (US-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 (Russian - KOI8)
		21866 = 21866 (Ukrainian - KOI8-U)
		28591 = 28591 (ISO 8859-1 Latin I)
		28592 = 28592 (ISO 8859-2 Central Europe)
		28594 = 28594 (ISO 8859-4 Baltic)
		28595 = 28595 (ISO 8859-5 Cyrillic)
		28597 = 28597 (ISO 8859-7 Greek)
		28599 = 28599 (ISO 8859-9 Latin 5)
		28605 = 28605 (ISO 8859-15 Latin 9)
		37 = 37    (IBM EBCDIC - U.S./Canada)
		437 = 437   (OEM - United States)
		500 = 500   (IBM EBCDIC - International)
		737 = 737   (OEM - Greek 437G)
		775 = 775   (OEM - Baltic)
		850 = 850   (OEM - Multilingual Latin I)
		852 = 852   (OEM - Latin II)
		855 = 855   (OEM - Cyrillic)
		857 = 857   (OEM - Turkish)
		860 = 860   (OEM - Portuguese)
		861 = 861   (OEM - Icelandic)
		863 = 863   (OEM - Canadian French)
		865 = 865   (OEM - Nordic)
		866 = 866   (OEM - Russian)
		869 = 869   (OEM - Modern Greek)
		874 = 874   (ANSI/OEM - Thai)
		875 = 875   (IBM EBCDIC - Modern Greek)
		932 = 932   (ANSI/OEM - Japanese Shift-JIS)
		936 = 936   (ANSI/OEM - Simplified Chinese GBK)
		949 = 949   (ANSI/OEM - Korean)
		950 = 950   (ANSI/OEM - Traditional Chinese Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 45568, File modification date = 04/08/2004  12:00, File description = DrWatson Postmortem Debugger, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1881984478|0xc9f5e1de6da983e89e714ed80c11f000|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:12, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 26112, File modification date = 14/04/2008  00:12, File description = Userinit Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |854273166|0xa93aee1928a9d7ce3e16d24ec7380f89|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:11, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 64512, File modification date = 14/04/2008  00:11, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-93686787|0xc14350fc0d47d806699c4f907fc6785b|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:11, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
    DllName=%SystemRoot%\System32\dimsntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy>
      "C:\WINDOWS\system32\dimsntfy.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 19456, File modification date = 14/04/2008  00:11, File description = DIMS Notification Handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-96338696|0xe2092f0a1d7abc243f9c2362483d150d|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 20480, File modification date = 14/04/2008  00:12, File description = Secondary Logon Service Notification DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1423237457|0x63ff9068e5bda0bc9ecd38fbbb216e24|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=WgaLogon.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon>
      "c:\windows\system32\wgalogon.dll" File version = 1.8.0031.9, File size = 241704, File modification date = 06/09/2008  03:30, File description = Windows Genuine Advantage Notifications, Product Name = Microsoft Genuine Advantage, Product version = 1.8.0031.9, Company name = Microsoft Corporation ( 1995-2008 Microsoft Corporation) |-19035101|0x8e7dddcc5a262480e7a8342956732bd9|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:12, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    ATIModeChange=Ati2mdxx.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ati2mdxx.exe" File version = 4.13.3, File size = 28672, File modification date = 04/09/2001  21:24, File description = ATI 2D Mode component, Product Name = ATI 2D Component, Product version = 4.13.3, Company name = ATI Technologies, Inc. (Copyright (c) ATI Technologies Inc. 2000) |-1751429173|0xfae95d6d7651b5629c4e19adbc9a3863|
    ATIPTA=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\ati technologies\ati control panel\atiptaxx.exe" File version = 6.14.10.4002, File size = 294912, File modification date = 08/11/2002  02:00, File description = ATI Desktop Control Panel, Product Name = ATI Desktop Component, Product version = 6.14.10.4002, Company name = ATI Technologies, Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |-2004664167|0x6c1d510033af5d12a5c00565bcc28051|
    PCTVOICE=pctspk.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\pctspk.exe" File version = 1, 0, 0, 1, File size = 163840, File modification date = 24/02/2003  20:35, File description = pctvoice MFC Application, Product Name = pctvoice Application, Product version = 1, 0, 0, 1, Company name =  (Copyright (C) 2001) |-1142386512|0x0b86bc4c123d3cd08817b1848db07ac6|
    SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\java\jre6\bin\jusched.exe" File version = 6.0.110.3, File size = 136600, File modification date = 22/02/2009  21:02, File description = Java(TM) Platform SE binary, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |1052156513|0xb98ffa8288efaabc436c30d198608345|
    AdaptecDirectCD="C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\roxio\easy cd creator 5\directcd\directcd.exe" File version = 5.3.4.21, File size = 684032, File modification date = 17/12/2002  17:28, File description = DirectCD Application, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |1772671083|0xbe3238a165afb321f1696cc1ff9ef271|
    VX1000=C:\WINDOWS\vVX1000.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\vvx1000.exe" File version = 1, 1, 4, 3, File size = 709992, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam Device Application, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |98603662|0xf9825069752b43ca98974b71a9b4dcf5|
    AS00_Gear511=C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\netgear\wg511scu\utility\gear511.exe" File version = 2, 52, 29, 4, File size = 1122412, File modification date = 20/01/2006  20:14, File description = NetgearRev MFC Application, Product Name =   NetgearRev Application, Product version = 2, 52, 29, 4, Company name =   (Copyright 2006) |1298360066|0xa7379f1702604a9167face01f881dcdb|
    ddoctorv2="C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2 <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\comcast\desktop doctor\bin\sprtcmd.exe" File version = 7.0.940.0, File size = 202560, File modification date = 24/04/2008  17:25, File description = , Product Name = SupportSoft sprtcmd , Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |1094850128|0xb2a36b8631e419808c50b8539bf9054b|
    QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\quicktime\qttask.exe" File version = 7.5.5 (990.7), File size = 413696, File modification date = 06/09/2008  19:09, File description = QuickTime Task, Product Name = QuickTime, Product version = QuickTime 7.5.5 (990.7), Company name = Apple Inc. (Copyright Apple Inc. 1989-2008) |-1340017501|0x6cd5c3276c83f72677d647f27ee14abd|
    mcagent_exe=C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\mcafee.com\agent\mcagent.exe" File version = 8,0,237,0, File size = 582992, File modification date = 01/11/2007  23:12, File description = McAfee Integrated Security Platform, Product Name = McAfee SecurityCenter, Product version = 8,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1714725955|0x9405b452064bfa6a0f78e2f177a988a4|
    ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe <HKEY_USERS\S-1-5-21-1844237615-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:12, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
    i8kfangui=C:\Program Files\I8kfanGUI\I8kfanGUI.exe /startup <HKEY_USERS\S-1-5-21-1844237615-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\i8kfangui\i8kfangui.exe" File version = 3.0, File size = 847872, File modification date = 30/11/2006  21:03, File description = Dell Inspiron/Latitude/Precision fan control, Product Name = I8kfanGUI Application, Product version = 3.0, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |1283842115|0x584ad7b3a83befc193a316b931796f77|
    updateMgr="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 <HKEY_USERS\S-1-5-21-1844237615-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\adobe\acrobat 7.0\reader\adobeupdatemanager.exe" File version = 3.1.0.10, File size = 313472, File modification date = 30/03/2006  21:45, File description = Adobe Update Manager, Product Name = Adobe Update Manager, Product version = 3.0, Company name = Adobe Systems Incorporated (Copyright  1998-2004 Adobe Systems Incorporated. All rights reserved.) |735001605|0x43f3f6d33c793089a7c32b45da16094b|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:11, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet001\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 167936, File modification date = 14/04/2008  00:11, File description = Software installation Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1503623780|0xd8849f77c0b66226335a59d26cb4edc6|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:11, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:11, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:11, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:11, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:11, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:12, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:12, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:12, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132096, File modification date = 14/04/2008  00:12, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |246607633|0x1b67b632786fef1c1bbaef46c2f3f2e6|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:11, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33792, File modification date = 14/04/2008  00:11, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1628291654|0x986b1ff5814366d71e0ac5755c88f2d3|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:12, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.5512, File size = 435200, File modification date = 14/04/2008  00:12, File description = Removable Storage Manager, Product Name = Microsoft Windows Whistler Operating System, Product version = 5.1.2400.5512, Company name = Microsoft Corporation (Copyright  2000 Microsoft Corporation) |-82139176|0x156f64a3345bd23c600655fb4d10bc08|
    ServiceDll=%SystemRoot%\System32\nwwks.dll <HKLM\System\ControlSet001\Services\NWCWorkstation\Parameters>
      "C:\WINDOWS\system32\nwwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 65536, File modification date = 14/04/2008  00:12, File description = Client Service for Netware, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1509485672|0x2c2fd0e6b0180f94c260dd26706aa5f4|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88576, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2064900991|0xad188be7bdf94e8df4ca0a55c00a5073|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 53248, File modification date = 14/04/2008  00:11, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1783184438|0x7e699ff5f59b5d9de5390e3c34c67cf5|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet001\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:12, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:12, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:12, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:12, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:11, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:12, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:12, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:12, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:12, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:12, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:12, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:12, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:12, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 19/10/2006  03:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet001\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:12, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet001\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 29/09/2006  00:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 129024, File modification date = 14/04/2008  00:12, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1787440249|0x295d21f14c335b53cb8154e5b1f892b9|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:11, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet002\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 167936, File modification date = 14/04/2008  00:11, File description = Software installation Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1503623780|0xd8849f77c0b66226335a59d26cb4edc6|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:11, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:11, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:11, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:11, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
    ServiceDll=%SystemRoot%\System32\dot3svc.dll <HKLM\System\ControlSet002\Services\Dot3svc\Parameters>
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:11, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ServiceDll=%SystemRoot%\System32\eapsvc.dll <HKLM\System\ControlSet002\Services\EapHost\Parameters>
      "C:\WINDOWS\system32\eapsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33792, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-185064511|0x2187855a7703adef0cef9ee4285182cc|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:11, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:12, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
    ServiceDll=%SystemRoot%\System32\kmsvc.dll <HKLM\System\ControlSet002\Services\hkmsvc\Parameters>
      "C:\WINDOWS\system32\kmsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:11, File description = Key Management Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |20109844|0x8878bd685e490239777bfe51320b88e9|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:12, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:12, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132096, File modification date = 14/04/2008  00:12, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |246607633|0x1b67b632786fef1c1bbaef46c2f3f2e6|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:11, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33792, File modification date = 14/04/2008  00:11, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1628291654|0x986b1ff5814366d71e0ac5755c88f2d3|
    ServiceDll=%SystemRoot%\System32\qagentrt.dll <HKLM\System\ControlSet002\Services\napagent\Parameters>
      "C:\WINDOWS\system32\qagentrt.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 291328, File modification date = 14/04/2008  00:12, File description = Quarantine Agent Service Run-Time, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-154644759|0x0102140028fad045756796e1c685d695|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:12, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.5512, File size = 435200, File modification date = 14/04/2008  00:12, File description = Removable Storage Manager, Product Name = Microsoft Windows Whistler Operating System, Product version = 5.1.2400.5512, Company name = Microsoft Corporation (Copyright  2000 Microsoft Corporation) |-82139176|0x156f64a3345bd23c600655fb4d10bc08|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88576, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2064900991|0xad188be7bdf94e8df4ca0a55c00a5073|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 53248, File modification date = 14/04/2008  00:11, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1783184438|0x7e699ff5f59b5d9de5390e3c34c67cf5|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet002\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:12, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:12, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:12, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:12, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:11, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:12, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:12, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:12, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:12, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:12, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:12, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:12, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:12, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 19/10/2006  03:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet002\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:12, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet002\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 29/09/2006  00:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 129024, File modification date = 14/04/2008  00:12, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1787440249|0x295d21f14c335b53cb8154e5b1f892b9|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet004\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:11, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet004\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 167936, File modification date = 14/04/2008  00:11, File description = Software installation Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1503623780|0xd8849f77c0b66226335a59d26cb4edc6|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet004\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:11, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet004\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:12, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet004\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:11, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet004\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:11, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet004\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet004\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:11, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet004\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:11, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet004\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:11, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
    ServiceDll=%SystemRoot%\System32\dot3svc.dll <HKLM\System\ControlSet004\Services\Dot3svc\Parameters>
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:11, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ServiceDll=%SystemRoot%\System32\eapsvc.dll <HKLM\System\ControlSet004\Services\EapHost\Parameters>
      "C:\WINDOWS\system32\eapsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33792, File modification date = 14/04/2008  00:11, File description = Microsoft EAPHost service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-185064511|0x2187855a7703adef0cef9ee4285182cc|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet004\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:11, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet004\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet004\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet004\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:12, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
    ServiceDll=%SystemRoot%\System32\kmsvc.dll <HKLM\System\ControlSet004\Services\hkmsvc\Parameters>
      "C:\WINDOWS\system32\kmsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:11, File description = Key Management Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |20109844|0x8878bd685e490239777bfe51320b88e9|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet004\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:12, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet004\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:12, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet004\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 132096, File modification date = 14/04/2008  00:12, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |246607633|0x1b67b632786fef1c1bbaef46c2f3f2e6|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet004\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:11, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet004\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33792, File modification date = 14/04/2008  00:11, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1628291654|0x986b1ff5814366d71e0ac5755c88f2d3|
    ServiceDll=%SystemRoot%\System32\qagentrt.dll <HKLM\System\ControlSet004\Services\napagent\Parameters>
      "C:\WINDOWS\system32\qagentrt.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 291328, File modification date = 14/04/2008  00:12, File description = Quarantine Agent Service Run-Time, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-154644759|0x0102140028fad045756796e1c685d695|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet004\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:12, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet004\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet004\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.5512, File size = 435200, File modification date = 14/04/2008  00:12, File description = Removable Storage Manager, Product Name = Microsoft Windows Whistler Operating System, Product version = 5.1.2400.5512, Company name = Microsoft Corporation (Copyright  2000 Microsoft Corporation) |-82139176|0x156f64a3345bd23c600655fb4d10bc08|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet004\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88576, File modification date = 14/04/2008  00:12, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2064900991|0xad188be7bdf94e8df4ca0a55c00a5073|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet004\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:12, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet004\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 53248, File modification date = 14/04/2008  00:11, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1783184438|0x7e699ff5f59b5d9de5390e3c34c67cf5|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet004\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:12, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet004\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet004\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:12, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet004\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:12, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet004\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:12, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet004\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:11, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet004\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet004\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:12, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet004\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:12, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet004\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:12, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet004\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:12, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet004\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:12, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet004\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:12, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet004\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:12, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet004\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:12, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet004\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:12, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet004\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:12, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet004\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:12, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet004\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 19/10/2006  03:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet004\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 617472, File modification date = 14/04/2008  00:11, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2014790809|0xbab489a5fe26f2d0c910cf7af7e4cf92|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet004\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:12, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet004\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:12, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet004\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 29/09/2006  00:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet004\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:12, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet004\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 129024, File modification date = 14/04/2008  00:12, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1787440249|0x295d21f14c335b53cb8154e5b1f892b9|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  18:36, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  16:39, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
    ImagePath=system32\DRIVERS\agp440.sys <HKLM\System\ControlSet001\Services\agp440>
      "c:\windows\system32\drivers\agp440.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 42368, File modification date = 13/04/2008  18:36, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-811459149|0x08fd04aa961bdc77fb983f328334e3d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet001\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet001\Services\Arp1394>
      "C:\WINDOWS\system32\drivers\arp1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 60800, File modification date = 13/04/2008  18:51, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |289852718|0xb5b8a80875c1dededa8b02765642c32f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet001\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 34312, File modification date = 25/07/2008  16:16, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |449120339|0x0e5e4957549056e2bf2c49f4f6b601ad|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  18:57, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  18:40, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
    ImagePath=%SystemRoot%\system32\Ati2evxx.exe <HKLM\System\ControlSet001\Services\Ati HotKey Poller>
      "C:\WINDOWS\system32\ati2evxx.exe" File version = 4.18.4060, File size = 147456, File modification date = 08/11/2002  03:22, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 4.18.4060, Company name = ATI Technologies Inc. (Copyright  1999-2002 ATI Technologies Inc.) |1548007852|0x61b40a0c3d725dbdcbc6999dd6ba4a4f|
    ImagePath=system32\DRIVERS\ati2mtag.sys <HKLM\System\ControlSet001\Services\ati2mtag>
      "c:\windows\system32\drivers\ati2mtag.sys" File version = 6.13.10.6230, File size = 539392, File modification date = 08/11/2002  03:31, File description = ATI Radeon Miniport Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |3912840|0xb4991feb456ea3dab743bce85a5303eb|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  18:51, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=system32\DRIVERS\bcm4sbxp.sys <HKLM\System\ControlSet001\Services\bcm4sbxp>
      "c:\windows\system32\drivers\bcm4sbxp.sys" File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  18:40, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 5632, File modification date = 14/04/2008  00:12, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1393639156|0x1cfe720eb8d93a7158a4ebc3ab178bde|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1239763571|0x34cbe729f38138217f9c80212a2a0c82|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet001\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 69632, File modification date = 25/07/2008  16:17, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2052858748|0xd87acaed61e417bba546ced5e7e36d9c|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet001\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 13952, File modification date = 13/04/2008  18:36, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1342912205|0x0f6c187d38d98f8df904589a5f94d411|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet001\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 10240, File modification date = 13/04/2008  18:36, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1770663233|0x6e4c9f21f0fae8940661144f41b13203|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5120, File modification date = 14/04/2008  00:12, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |478964458|0x0a9ba6af531afe7fa5e4fb973852d863|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  18:40, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.5512.503.0, File size = 224768, File modification date = 14/04/2008  00:12, File description = Logical Disk Manager service process, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |1983501827|0xe46050330bd42f33609117f861e32d3c|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  18:44, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  18:44, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 04/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
    ImagePath=system32\DRIVERS\EAPPkt.sys <HKLM\System\ControlSet001\Services\EAPPkt>
      "c:\windows\system32\drivers\eappkt.sys" File version = 5.1.2600.1106 built by: WinDDK, File size = 66048, File modification date = 01/04/2005  16:43, File description = NDIS User mode I/O Driver, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.1106, Company name = Windows (R) 2000 DDK provider ( Microsoft Corporation. All rights reserved.) |-498942577|0xefacd8d57a42a93e244a0dbd357e8cb8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=\??\C:\WINDOWS\system32\drivers\fanio.sys <HKLM\System\ControlSet001\Services\fanio>
      "\\?\c:\windows\system32\drivers\fanio.sys" File version = 2.2, File size = 20480, File modification date = 21/10/2006  21:26, File description = I8k Fan I/O, Product Name = fanio.sys, Product version = 2.2, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |383413257|0x8b5c73dfb031d5d5112cd7be5b0f85ad|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  18:32, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 04/08/2004  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  18:56, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet001\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 10368, File modification date = 13/04/2008  18:45, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738735441|0xccf82c5ec8a7326c3066de870c06daf1|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  18:53, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:18, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
    ImagePath="C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" <HKLM\System\ControlSet001\Services\IDriverT>
      "c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe" File version = 11.00.28844, File size = 69632, File modification date = 04/04/2005  05:41, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 11.00, Company name = Macrovision Corporation (Copyright (C) 2005 Macrovision Corporation) |798943343|0x1cf03c69b49acb70c722df92755c0c8c|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  18:40, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 150528, File modification date = 14/04/2008  00:12, File description = Image Mastering API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-311014|0x30deaf54a9755bb8546168cfe8a6b5e1|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet001\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:40, File description = Intel PCI IDE Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-926823474|0xb5466a9250342a7aa0cd1fba13420678|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  18:31, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  18:53, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 04/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  18:57, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  18:57, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:19, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  18:54, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  18:36, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  18:39, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  18:45, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.5512, File size = 32768, File modification date = 14/04/2008  00:12, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1996-2001) |2042102201|0xd18f1f0c101d06a1c1adf26eed16fcdd|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 13/04/2008  18:39, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet001\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 17/08/2001  18:48, File description = HID Mouse Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273853103|0xb1c303e17fb9d46e87a98e4ba6769685|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  18:32, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.700, File size = 6144, File modification date = 14/04/2008  00:12, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |1236211169|0xa137f1470499a205abbb9aafb3b6f2b1|
    ImagePath=C:\WINDOWS\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4001.5512, File size = 78848, File modification date = 14/04/2008  00:12, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-990287589|0x5879d691e842574a20fe63817cb76df9|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  18:39, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  18:39, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  18:39, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 13/04/2008  18:36, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  18:57, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 13/04/2008  18:55, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:20, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  18:56, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:21, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet001\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61824, File modification date = 13/04/2008  18:51, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-664318305|0xe9e47cfb2d461fa0fc75b7a74c6383ea|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NWCWorkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 04/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 04/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\nwlnkipx.sys <HKLM\System\ControlSet001\Services\NwlnkIpx>
      "c:\windows\system32\drivers\nwlnkipx.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88320, File modification date = 13/04/2008  18:56, File description = NWLINK2 IPX Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |503842886|0x8b8b1be2dba4025da6786c645f77f123|
    ImagePath=system32\DRIVERS\nwlnknb.sys <HKLM\System\ControlSet001\Services\NwlnkNb>
      "c:\windows\system32\drivers\nwlnknb.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 63232, File modification date = 04/08/2004  12:00, File description = NWLINK2 IPX Netbios Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-30218609|0x56d34a67c05e94e16377c60609741ff8|
    ImagePath=system32\DRIVERS\nwlnkspx.sys <HKLM\System\ControlSet001\Services\NwlnkSpx>
      "c:\windows\system32\drivers\nwlnkspx.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 55936, File modification date = 04/08/2004  12:00, File description = NWLINK2 SPX Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2062368140|0xc0bb7d1615e1acbdc99757f6ceaf8cf0|
    ImagePath=system32\DRIVERS\nwrdr.sys <HKLM\System\ControlSet001\Services\NWRDR>
      "c:\windows\system32\drivers\nwrdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163584, File modification date = 13/04/2008  18:34, File description = NetWare Redirector File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1054145906|0x36b9b950e3d2e100970a48d8bad86740|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet001\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 61696, File modification date = 13/04/2008  18:46, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1583879848|0xca33832df41afb202ee7aeb05145922f|
    ImagePath=\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS <HKLM\System\ControlSet001\Services\OMCI>
      "C:\WINDOWS\system32\drivers\omci.sys" File version = 6, 1, 0, 242, File size = 13632, File modification date = 22/08/2001  13:42, File description = OMCI Device Driver, Product Name = OMCI Driver, Product version = 6, 1, 0, 242, Company name = Dell Computer Corporation (Copyright  Dell Computer Corp. 2000) |924069296|0xcec7e2c6c1fa00c7ab2f5434f848ae51|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  18:36, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  18:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet001\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 120192, File modification date = 13/04/2008  18:36, File description = PCMCIA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34174239|0x9e89ef60e9ee05e3f2eef2da7397f1c1|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:19, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet001\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  18:56, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 04/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\ptserial.sys <HKLM\System\ControlSet001\Services\Ptserial>
      "c:\windows\system32\drivers\ptserial.sys" File version = 2.50.47, File size = 135292, File modification date = 24/02/2003  20:30, File description = HSP Modem Serial Device Driver for NT 5.0, Product Name = HSP Modem Serial Device, Product version = 2.50.47, Company name = PCTEL, INC. (Copyright (C) PCTEL. 1994-2003) |1334016457|0x6a3fbbbba5f228b003ef64070f7b3fe4|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 04/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:19, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  18:57, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 04/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:28, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet001\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  18:32, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 141312, File modification date = 14/04/2008  00:12, File description = Microsoft Remote Desktop Help Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |283819399|0x3c37bf86641bda977c3bf8a840f3b7fa|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 13/04/2008  18:40, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 75264, File modification date = 14/04/2008  00:12, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2066066351|0xaaed593f84afa419bbae8572af87cf6a|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 04/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 95744, File modification date = 14/04/2008  00:12, File description = Smart Card Resource Management Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |584144454|0x86d007e7a654b9a71d1d7d856b104353|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = 4.03.086, File size = 20480, File modification date = 13/11/2007  10:25, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  18:36, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\STAC97.sys <HKLM\System\ControlSet001\Services\STAC97>
      "c:\windows\system32\drivers\stac97.sys" File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 13/04/2008  18:39, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  18:45, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{BB157565-9A1A-48E9-9A36-1A309BCECBC4} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5120, File modification date = 14/04/2008  00:12, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |478964458|0x0a9ba6af531afe7fa5e4fb973852d863|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 89600, File modification date = 14/04/2008  00:12, File description = Performance Logs and Alerts Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |862147980|0xc7abbc59b43274b1109df6b24d617051|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 20/06/2008  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-946646010|0x9aefa14bd6b182d61e3119fa5f436d3d|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:13, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet001\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 73216, File modification date = 14/04/2008  00:12, File description = Telnet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059603438|0xdb7205804759ff62c34e3efd8a4cc76a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  18:39, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18432, File modification date = 14/04/2008  00:12, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1705983588|0x05365fb38fca1e98f7a566aaaf5d1815|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  18:45, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  18:45, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  18:45, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet001\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  18:45, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  18:44, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
    ImagePath=system32\DRIVERS\vmodem.sys <HKLM\System\ControlSet001\Services\Vmodem>
      "c:\windows\system32\drivers\vmodem.sys" File version = 2.50.50, File size = 690973, File modification date = 30/05/2003  22:50, File description = HSP Modem Modem Device Driver, Product Name = HSP Modem Modem Device, Product version = 2.50.50, Company name = PCTEL, INC. (Copyright PCtel, Inc.1994-2003) |-189503282|0x09c2fcd4e379e6ab804a58caa2a3508b|
    ImagePath=system32\DRIVERS\vpctcom.sys <HKLM\System\ControlSet001\Services\Vpctcom>
      "c:\windows\system32\drivers\vpctcom.sys" File version = 2.50-9K, File size = 477403, File modification date = 30/05/2003  23:45, File description = HSP Modem Virtual Control Device, Product Name = HSP Modem Virtual Control Device, Product version = 2.50-9K, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-2000) |1122360456|0x081bc31edda73d40defd347e580f9144|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 289792, File modification date = 14/04/2008  00:12, File description = Microsoft Volume Shadow Copy Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |64155087|0x7a9db3a67c333bf0bd42e42b8596854b|
    ImagePath=system32\DRIVERS\vvoice.sys <HKLM\System\ControlSet001\Services\Vvoice>
      "c:\windows\system32\drivers\vvoice.sys" File version = 3.53.00, File size = 66111, File modification date = 28/05/2003  17:08, File description = HSP Modem device driver, Product Name = PCTEL HSP Modem Voice Device, Product version = 3.53.00, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-1998) |-1457973619|0xdb18922f81e90d95e69f45ab8e9fc5c1|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  18:57, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 126464, File modification date = 14/04/2008  00:12, File description = WMI Performance Adapter Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18861181|0xe0673f1106e62a68d2257e376079f821|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet001\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 913408, File modification date = 19/10/2006  02:05, File description = Windows Media Player Network Sharing Service, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |121175657|0xf74e3d9a7fa9556c3bbb14d4e5e63d3b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet001\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 29/09/2006  00:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet001\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 29/09/2006  01:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet001\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe" <HKLM\System\ControlSet002\Services\aawservice>
      "c:\program files\lavasoft\ad-aware\aawservice.exe" File version = 7,1,0,12, File size = 611664, File modification date = 25/07/2008  16:12, File description = Ad-Aware Service, Product Name = Ad-Aware Service, Product version = 7,1,0,12, Company name = Lavasoft (Copyright (C) 2008) |1438890876|0x17067069b9a7865028c1f2e6971d0ccc|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  18:36, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  16:39, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
    ImagePath=system32\DRIVERS\AegisP.sys <HKLM\System\ControlSet002\Services\AegisP>
      "c:\windows\system32\drivers\aegisp.sys" File version = 3.2.0.3, File size = 17801, File modification date = 09/02/2008  00:42, File description = IEEE 802.1X Protocol Driver, Product Name = AEGIS Client 3.2.0.3, Product version = 3.2.0.3, Company name = Meetinghouse Data Communications (Copyright (C) Meetinghouse Data Communications 1997-2004) |1913693436|0x2c5c22990156a1063e19ad162191dc1d|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
    ImagePath=system32\DRIVERS\agp440.sys <HKLM\System\ControlSet002\Services\agp440>
      "c:\windows\system32\drivers\agp440.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 42368, File modification date = 13/04/2008  18:36, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-811459149|0x08fd04aa961bdc77fb983f328334e3d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
    ImagePath="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" <HKLM\System\ControlSet002\Services\Apple Mobile Device>
      "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" File version = 2.11.32.0, File size = 116040, File modification date = 01/10/2008  17:06, File description = Apple Mobile Device Service, Product Name = Apple Mobile Device Service, Product version = 2.11.32.0, Company name = Apple Inc. ( 2007-2008 Apple Inc. All Rights Reserved.) |1186677590|0xb8e865d24f2753a35cc2a9a6a3ce1ad4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet002\Services\Arp1394>
      "C:\WINDOWS\system32\drivers\arp1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 60800, File modification date = 13/04/2008  18:51, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |289852718|0xb5b8a80875c1dededa8b02765642c32f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet002\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 34312, File modification date = 25/07/2008  16:16, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |449120339|0x0e5e4957549056e2bf2c49f4f6b601ad|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  18:57, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  18:40, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
    ImagePath=%SystemRoot%\system32\Ati2evxx.exe <HKLM\System\ControlSet002\Services\Ati HotKey Poller>
      "C:\WINDOWS\system32\ati2evxx.exe" File version = 4.18.4060, File size = 147456, File modification date = 08/11/2002  03:22, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 4.18.4060, Company name = ATI Technologies Inc. (Copyright  1999-2002 ATI Technologies Inc.) |1548007852|0x61b40a0c3d725dbdcbc6999dd6ba4a4f|
    ImagePath=system32\DRIVERS\ati2mtag.sys <HKLM\System\ControlSet002\Services\ati2mtag>
      "c:\windows\system32\drivers\ati2mtag.sys" File version = 6.13.10.6230, File size = 539392, File modification date = 08/11/2002  03:31, File description = ATI Radeon Miniport Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |3912840|0xb4991feb456ea3dab743bce85a5303eb|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  18:51, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=\??\C:\WINDOWS\system32\AWINDIS5.SYS <HKLM\System\ControlSet002\Services\AWINDIS5>
      "\\?\c:\windows\system32\awindis5.sys" File version = 5.00.13.50, File size = 16194, File modification date = 11/04/2002  23:43, File description = AWINDIS NDIS 5.0 Protocol Driver, Product Name = AMBIT WinDis32 Protocol Driver for Windows, Product version = 5.00.13.50, Company name = AMBIT Microsystems Corporation. (Copyright ) |-582550093|0xf62b70d3209e38a6c19a03109a25b903|
    ImagePath=system32\DRIVERS\bcm4sbxp.sys <HKLM\System\ControlSet002\Services\bcm4sbxp>
      "c:\windows\system32\drivers\bcm4sbxp.sys" File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Bonjour\mDNSResponder.exe" <HKLM\System\ControlSet002\Services\Bonjour Service>
      "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\CCDECODE.sys <HKLM\System\ControlSet002\Services\CCDECODE>
      "c:\windows\system32\drivers\ccdecode.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 17024, File modification date = 13/04/2008  18:46, File description = WDM Closed Caption VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123412182|0x0be5aef125be881c4f854c554f2b025c|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  18:40, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 5632, File modification date = 14/04/2008  00:12, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1393639156|0x1cfe720eb8d93a7158a4ebc3ab178bde|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1239763571|0x34cbe729f38138217f9c80212a2a0c82|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet002\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 69632, File modification date = 25/07/2008  16:17, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2052858748|0xd87acaed61e417bba546ced5e7e36d9c|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet002\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 13952, File modification date = 13/04/2008  18:36, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1342912205|0x0f6c187d38d98f8df904589a5f94d411|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet002\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 10240, File modification date = 13/04/2008  18:36, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1770663233|0x6e4c9f21f0fae8940661144f41b13203|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  18:40, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.5512.503.0, File size = 224768, File modification date = 14/04/2008  00:12, File description = Logical Disk Manager service process, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |1983501827|0xe46050330bd42f33609117f861e32d3c|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  18:44, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  18:44, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 04/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k dot3svc <HKLM\System\ControlSet002\Services\Dot3svc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:11, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k eapsvcs <HKLM\System\ControlSet002\Services\EapHost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=\??\C:\WINDOWS\system32\drivers\fanio.sys <HKLM\System\ControlSet002\Services\fanio>
      "\\?\c:\windows\system32\drivers\fanio.sys" File version = 2.2, File size = 20480, File modification date = 21/10/2006  21:26, File description = I8k Fan I/O, Product Name = fanio.sys, Product version = 2.2, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |383413257|0x8b5c73dfb031d5d5112cd7be5b0f85ad|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\fltmgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  18:32, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
    ImagePath=c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe <HKLM\System\ControlSet002\Services\FontCache3.0.0.0>
      "c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe" File version = 3.0.6920.1427 built by: SP, File size = 46104, File modification date = 30/07/2008  02:10, File description = PresentationFontCache.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.6920.1427, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1802830677|0x8ba7c024070f2b7fdd98ed8a4ba41789|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 04/08/2004  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  18:56, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet002\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 10368, File modification date = 13/04/2008  18:45, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738735441|0xccf82c5ec8a7326c3066de870c06daf1|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\hkmsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  18:53, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:18, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
    ImagePath="C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" <HKLM\System\ControlSet002\Services\IDriverT>
      "c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe" File version = 11.00.28844, File size = 69632, File modification date = 04/04/2005  05:41, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 11.00, Company name = Macrovision Corporation (Copyright (C) 2005 Macrovision Corporation) |798943343|0x1cf03c69b49acb70c722df92755c0c8c|
    ImagePath="c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" <HKLM\System\ControlSet002\Services\idsvc>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe" File version = 3.0.4506.2152 (SP.030729-0100), File size = 881664, File modification date = 30/07/2008  00:24, File description = Windows CardSpace, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.2152, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |973074649|0xc01ac32dc5c03076cfb852cb5da5229c|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  18:40, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 150528, File modification date = 14/04/2008  00:12, File description = Image Mastering API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-311014|0x30deaf54a9755bb8546168cfe8a6b5e1|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet002\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:40, File description = Intel PCI IDE Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-926823474|0xb5466a9250342a7aa0cd1fba13420678|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  18:31, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
    ImagePath=system32\drivers\ip6fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  18:53, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 04/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  18:57, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  18:57, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:19, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  18:54, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  18:36, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
    ImagePath="C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" <HKLM\System\ControlSet002\Services\JavaQuickStarterService>
      "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
      "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 41207, File modification date = 22/02/2009  21:02, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1257361429|0xb59edd1d5295225bec3fa87cdb1876ff|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  18:39, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  18:45, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe"  -s "C:\Program Files\Linksys\Linksys Updater\conf\wrapper.conf" <HKLM\System\ControlSet002\Services\LinksysUpdater>
      "c:\program files\linksys\linksys updater\bin\linksysupdater.exe" File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
      "c:\program files\linksys\linksys updater\conf\wrapper.conf" File version = (null), File size = 2442, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1890676943|0x87a811c19a08c115f700834c42d706eb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\mam4410c.sys <HKLM\System\ControlSet002\Services\mam4410c>
      "c:\windows\system32\drivers\mam4410c.sys" File version = 1, 1, 1, 7, File size = 24784, File modification date = 16/06/2005  22:11, File description = USB Common Control Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 7, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |-305291688|0x494daad7dab01d160c37ae7d99b00de6|
    ImagePath=System32\Drivers\mam4410m.sys <HKLM\System\ControlSet002\Services\mam4410m>
      "c:\windows\system32\drivers\mam4410m.sys" File version = 1, 1, 1, 9, File size = 25044, File modification date = 16/06/2005  22:13, File description = USB Common Modem Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 9, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |425162036|0xb2434b4f7827798abecd2103fb8f64a5|
    ImagePath=System32\Drivers\mam4410u.sys <HKLM\System\ControlSet002\Services\mam4410u>
      "c:\windows\system32\drivers\mam4410u.sys" File version = 1, 41, 1, 6, File size = 52309, File modification date = 19/03/2007  18:39, File description = Usb Bus Driver, Product Name = Handset Manager, Product version = 1, 41, 1, 6, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |2075266820|0x5020e06ad2c3551a1f37cf2d48ebc418|
    ImagePath=system32\DRIVERS\MaVc2K.sys <HKLM\System\ControlSet002\Services\MaVctrl>
      "c:\windows\system32\drivers\mavc2k.sys" File version = 1, 1, 2, 2, File size = 11986, File modification date = 16/01/2007  15:44, File description = Mobile Action Virtual Control, Product Name = Handset Manager, Product version = 1, 1, 2, 2, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All rights reserved.) |-1584420214|0x8181ceb341cbb2f7f893f85b915d5e15|
    ImagePath=C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe <HKLM\System\ControlSet002\Services\mcmscsvc>
      "c:\program files\mcafee\msc\mcmscsvc.exe" File version = 8,1,159,0, File size = 767976, File modification date = 09/01/2008  20:50, File description = McAfee Services, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1752091033|0xcb3a8976de2f65349322da7627cea223|
    ImagePath="c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe" <HKLM\System\ControlSet002\Services\McNASvc>
      "c:\program files\common files\mcafee\mna\mcnasvc.exe" File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|
    ImagePath=C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe <HKLM\System\ControlSet002\Services\McODS>
      "c:\program files\mcafee\virusscan\mcods.exe" File version = 12,0,172,0, File size = 378184, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan - On Demand Scan, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-691597899|0x21456f3051cbefd1f2d60d8b9ab9c6ee|
    ImagePath=c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe <HKLM\System\ControlSet002\Services\McProxy>
      "c:\program files\common files\mcafee\mcproxy\mcproxy.exe" File version = 2,0,150,0, File size = 359248, File modification date = 15/08/2007  17:36, File description = McAfee Proxy Service Module, Product Name = McAfee Proxy, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1165250198|0x8cf3da0be6094c34d7c4a85493e60547|
    ImagePath=C:\Program Files\McAfee\VirusScan\McShield.exe <HKLM\System\ControlSet002\Services\McShield>
      "c:\program files\mcafee\virusscan\mcshield.exe" File version = VSCORE.14.0.0.349.x86, File size = 144704, File modification date = 24/07/2007  17:02, File description = On-Access Scanner service, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1011349640|0x33734abfa52ec8d096a1254d645e9b4f|
    ImagePath=C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe <HKLM\System\ControlSet002\Services\McSysmon>
      "c:\program files\mcafee\virusscan\mcsysmon.exe" File version = 12,1,111,0, File size = 695624, File modification date = 05/12/2007  15:04, File description = McAfee SystemGuards Service, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1764132594|0xfd47df2bcc3544df65b01ad6b6062430|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\mfeavfk.sys <HKLM\System\ControlSet002\Services\mfeavfk>
      "C:\WINDOWS\system32\drivers\mfeavfk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 79304, File modification date = 22/11/2007  11:44, File description = Anti-Virus File System Filter Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1807686372|0xc97cbfd71c1c215150a3b3e55f77a7a3|
    ImagePath=system32\drivers\mfebopk.sys <HKLM\System\ControlSet002\Services\mfebopk>
      "C:\WINDOWS\system32\drivers\mfebopk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 35240, File modification date = 22/11/2007  11:44, File description = Buffer Overflow Protection Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1961186230|0x5447338b83a1a2354fb2fea7604387fd|
    ImagePath=system32\drivers\mfehidk.sys <HKLM\System\ControlSet002\Services\mfehidk>
      "C:\WINDOWS\system32\drivers\mfehidk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 201320, File modification date = 22/11/2007  11:44, File description = Host Intrusion Detection Link Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1081701495|0x6c9a6ed60b8fc3baf72fe1b1d096445b|
    ImagePath=system32\drivers\mferkdk.sys <HKLM\System\ControlSet002\Services\mferkdk>
      "c:\windows\system32\drivers\mferkdk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 33832, File modification date = 22/11/2007  11:44, File description = VSCore Code Analysis Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1104730757|0xa551154b51d6a93fccf70fc4e8eaf4bd|
    ImagePath=system32\drivers\mfesmfk.sys <HKLM\System\ControlSet002\Services\mfesmfk>
      "C:\WINDOWS\system32\drivers\mfesmfk.sys" File version = SYSCORE.14.0.0.284.x86, File size = 40488, File modification date = 02/12/2007  17:51, File description = System Monitor Filter Driver, Product Name = SYSCORE.14.0.0.284.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |627931775|0x299a86b780c9627aaa24e74292363ed2|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.5512, File size = 32768, File modification date = 14/04/2008  00:12, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1996-2001) |2042102201|0xd18f1f0c101d06a1c1adf26eed16fcdd|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 13/04/2008  18:39, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet002\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 17/08/2001  18:48, File description = HID Mouse Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273853103|0xb1c303e17fb9d46e87a98e4ba6769685|
    ImagePath=System32\Drivers\Mpfp.sys <HKLM\System\ControlSet002\Services\MPFP>
      "c:\windows\system32\drivers\mpfp.sys" File version = 9.0.114.0, File size = 113952, File modification date = 13/07/2007  11:20, File description = McAfee Personal Firewall Plus Driver, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.114.0, Company name = McAfee, Inc. (Copyright (c) 2007 McAfee, Inc. All rights reserved.) |2104134654|0xe454f42ae5524d695d76eab5d363b8ac|
    ImagePath="C:\Program Files\McAfee\MPF\MPFSrv.exe" <HKLM\System\ControlSet002\Services\MpfService>
      "c:\program files\mcafee\mpf\mpfsrv.exe" File version = 9.0.136.0, File size = 856864, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Service, Product Name = McAfee Personal Firewall, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1578675555|0x346f30f1ff73553aa466f4ae7948da00|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  18:32, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.700, File size = 6144, File modification date = 14/04/2008  00:12, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |1236211169|0xa137f1470499a205abbb9aafb3b6f2b1|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet002\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4001.5512, File size = 78848, File modification date = 14/04/2008  00:12, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-990287589|0x5879d691e842574a20fe63817cb76df9|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  18:39, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  18:39, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  18:39, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 13/04/2008  18:36, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
    ImagePath=system32\drivers\MSTEE.sys <HKLM\System\ControlSet002\Services\MSTEE>
      "c:\windows\system32\drivers\mstee.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
    ImagePath=system32\DRIVERS\NABTSFEC.sys <HKLM\System\ControlSet002\Services\NABTSFEC>
      "c:\windows\system32\drivers\nabtsfec.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 85248, File modification date = 13/04/2008  18:46, File description = WDM NABTS/FEC VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-702127793|0x5b50f1b2a2ed47d560577b221da734db|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\napagent>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\NdisIP.sys <HKLM\System\ControlSet002\Services\NdisIP>
      "c:\windows\system32\drivers\ndisip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 10880, File modification date = 13/04/2008  18:46, File description = Microsoft IP Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-495085904|0x7ff1f1fd8609c149aa432f95a8163d97|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  18:57, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 13/04/2008  18:55, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:20, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  18:56, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:21, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=system32\DRIVERS\wg511nd5.sys <HKLM\System\ControlSet002\Services\NETGEAR_WG511_SERVICE>
      "c:\windows\system32\drivers\wg511nd5.sys" File version = 4.0.0.140, File size = 449888, File modification date = 25/07/2005  22:48, File description = Driver for Atheros AR5001 Wireless Network Adapter, Product Name = Atheros AR5001 Wireless Network Adapter, Product version = 4.0.0.140, Company name = Atheros Communications, Inc. (2001-2004 Atheros Communications, Inc. All Rights Reserved.) |-2056780248|0x8a91fd656d0832195eafb6cb45b06c27|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" <HKLM\System\ControlSet002\Services\NetTcpPortSharing>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe" File version = 3.0.4506.2152 (SP.030729-0100), File size = 132096, File modification date = 30/07/2008  00:16, File description = SMSvcHost.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.2152, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-117179601|0xd34612c5d02d026535b3095d620626ae|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet002\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61824, File modification date = 13/04/2008  18:51, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-664318305|0xe9e47cfb2d461fa0fc75b7a74c6383ea|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 04/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 04/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet002\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 61696, File modification date = 13/04/2008  18:46, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1583879848|0xca33832df41afb202ee7aeb05145922f|
    ImagePath=\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS <HKLM\System\ControlSet002\Services\OMCI>
      "C:\WINDOWS\system32\drivers\omci.sys" File version = 6, 1, 0, 242, File size = 13632, File modification date = 22/08/2001  13:42, File description = OMCI Device Driver, Product Name = OMCI Driver, Product version = 6, 1, 0, 242, Company name = Dell Computer Corporation (Copyright  Dell Computer Corp. 2000) |924069296|0xcec7e2c6c1fa00c7ab2f5434f848ae51|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  18:36, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  18:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet002\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 120192, File modification date = 13/04/2008  18:36, File description = PCMCIA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34174239|0x9e89ef60e9ee05e3f2eef2da7397f1c1|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:19, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet002\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  18:56, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 04/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\ptserial.sys <HKLM\System\ControlSet002\Services\Ptserial>
      "c:\windows\system32\drivers\ptserial.sys" File version = 2.50.47, File size = 135292, File modification date = 24/02/2003  20:30, File description = HSP Modem Serial Device Driver for NT 5.0, Product Name = HSP Modem Serial Device, Product version = 2.50.47, Company name = PCTEL, INC. (Copyright (C) PCTEL. 1994-2003) |1334016457|0x6a3fbbbba5f228b003ef64070f7b3fe4|
    ImagePath=system32\DRIVERS\OVCD.sys <HKLM\System\ControlSet002\Services\QCDonner>
      "c:\windows\system32\drivers\ovcd.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 28032, File modification date = 17/08/2001  20:05, File description = Video Minidriver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( 1996-2000 Logitech.  All rights reserved.) |-1990550668|0xfddd1aeb9f81ef1e6e48ae1edc2a97d6|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 04/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:19, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  18:57, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 04/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:28, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet002\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  18:32, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 141312, File modification date = 14/04/2008  00:12, File description = Microsoft Remote Desktop Help Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |283819399|0x3c37bf86641bda977c3bf8a840f3b7fa|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 13/04/2008  18:40, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 75264, File modification date = 14/04/2008  00:12, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2066066351|0xaaed593f84afa419bbae8572af87cf6a|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 04/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 95744, File modification date = 14/04/2008  00:12, File description = Smart Card Resource Management Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |584144454|0x86d007e7a654b9a71d1d7d856b104353|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\drivers\scsiport.sys <HKLM\System\ControlSet002\Services\ScsiPort>
      "C:\WINDOWS\system32\drivers\scsiport.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96384, File modification date = 13/04/2008  18:40, File description = SCSI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-893441374|0x76c465f570e90c28942d52ccb2580a10|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = 4.03.086, File size = 20480, File modification date = 13/11/2007  10:25, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\sis163u.sys <HKLM\System\ControlSet002\Services\SIS163u>
      "c:\windows\system32\drivers\sis163u.sys" File version = 5.1.1039.1020, File size = 167424, File modification date = 31/12/2004  22:46, File description = SiS163 usb Wireless LAN Adapter Driver, Product Name = NDIS NIC Driver, Product version = 5.1.1039.1020, Company name = SiS Corporation (SiS Corporation) |1676611955|0x24c563c9ab67db0d80070c8e0945ff87|
    ImagePath=C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe <HKLM\System\ControlSet002\Services\SiSWLSvc>
      "c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\siswlsvc.exe" File version = (null), File size = 45056, File modification date = 31/12/2004  22:47, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |971795479|0xe2892f92c40807cf20b4f0132c8e0aef|
    ImagePath=system32\DRIVERS\SLIP.sys <HKLM\System\ControlSet002\Services\SLIP>
      "c:\windows\system32\drivers\slip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 11136, File modification date = 13/04/2008  18:46, File description = Microsoft Slip Deframing Filter Minidriver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1964362680|0x866d538ebe33709a5c9f5c62b73b7d14|
    ImagePath=system32\DRIVERS\SONYPVU1.SYS <HKLM\System\ControlSet002\Services\SONYPVU1>
      "c:\windows\system32\drivers\sonypvu1.sys" File version = 1.3.0526.0 (XPClient.010817-1148), File size = 7552, File modification date = 17/08/2001  18:56, File description = Sony USB Lower Filter driver, Product Name = Sony USB Lower Filter driver, Product version = 1.3.0526.0, Company name = Sony Corporation (Copyright 1999,2000 Sony Corporation) |740166423|0xa1eceeaa5c5e74b2499eb51d38185b84|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
    ImagePath="C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe" /service /P ddoctorv2 <HKLM\System\ControlSet002\Services\sprtsvc_ddoctorv2>
      "c:\program files\comcast\desktop doctor\bin\sprtsvc.exe" File version = 7.0.940.0, File size = 202560, File modification date = 24/04/2008  17:26, File description = SupportSoft Agent Service, Product Name = SupportSoft sprtsvc, Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |-1245770320|0xc3716ec0d36ad924b6888d794563e647|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  18:36, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\STAC97.sys <HKLM\System\ControlSet002\Services\STAC97>
      "c:\windows\system32\drivers\stac97.sys" File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\StreamIP.sys <HKLM\System\ControlSet002\Services\streamip>
      "c:\windows\system32\drivers\streamip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 15232, File modification date = 13/04/2008  18:46, File description = Microsoft IP Test Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |735896275|0x77813007ba6265c4b6098187e6ed79d2|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 13/04/2008  18:39, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  18:45, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 89600, File modification date = 14/04/2008  00:12, File description = Performance Logs and Alerts Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |862147980|0xc7abbc59b43274b1109df6b24d617051|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 20/06/2008  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-946646010|0x9aefa14bd6b182d61e3119fa5f436d3d|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:13, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet002\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 73216, File modification date = 14/04/2008  00:12, File description = Telnet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059603438|0xdb7205804759ff62c34e3efd8a4cc76a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  18:39, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18432, File modification date = 14/04/2008  00:12, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1705983588|0x05365fb38fca1e98f7a566aaaf5d1815|
    ImagePath=System32\Drivers\usbaapl.sys <HKLM\System\ControlSet002\Services\USBAAPL>
      "c:\windows\system32\drivers\usbaapl.sys" File version = 1, 38, 0, 0, File size = 32000, File modification date = 01/10/2008  17:01, File description = Apple Mobile Device USB Driver, Product Name = Apple Mobile Device USB Driver, Product version = 1.38.0.0, Company name = Apple, Inc. ( Apple, Inc.  All rights reserved.) |454820262|0xc1ca131f4e3ed63d6bc89a35ffad4cda|
    ImagePath=system32\drivers\usbaudio.sys <HKLM\System\ControlSet002\Services\usbaudio>
      "c:\windows\system32\drivers\usbaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet002\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 32128, File modification date = 13/04/2008  18:45, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1127277154|0x173f317ce0db8e21322e71b7e60a27e8|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  18:45, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  18:45, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  18:45, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  18:45, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet002\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  18:45, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  18:44, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
    ImagePath=system32\DRIVERS\vmodem.sys <HKLM\System\ControlSet002\Services\Vmodem>
      "c:\windows\system32\drivers\vmodem.sys" File version = 2.50.50, File size = 690973, File modification date = 30/05/2003  22:50, File description = HSP Modem Modem Device Driver, Product Name = HSP Modem Modem Device, Product version = 2.50.50, Company name = PCTEL, INC. (Copyright PCtel, Inc.1994-2003) |-189503282|0x09c2fcd4e379e6ab804a58caa2a3508b|
    ImagePath=system32\DRIVERS\vpctcom.sys <HKLM\System\ControlSet002\Services\Vpctcom>
      "c:\windows\system32\drivers\vpctcom.sys" File version = 2.50-9K, File size = 477403, File modification date = 30/05/2003  23:45, File description = HSP Modem Virtual Control Device, Product Name = HSP Modem Virtual Control Device, Product version = 2.50-9K, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-2000) |1122360456|0x081bc31edda73d40defd347e580f9144|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 289792, File modification date = 14/04/2008  00:12, File description = Microsoft Volume Shadow Copy Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |64155087|0x7a9db3a67c333bf0bd42e42b8596854b|
    ImagePath=system32\DRIVERS\vvoice.sys <HKLM\System\ControlSet002\Services\Vvoice>
      "c:\windows\system32\drivers\vvoice.sys" File version = 3.53.00, File size = 66111, File modification date = 28/05/2003  17:08, File description = HSP Modem device driver, Product Name = PCTEL HSP Modem Voice Device, Product version = 3.53.00, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-1998) |-1457973619|0xdb18922f81e90d95e69f45ab8e9fc5c1|
    ImagePath=system32\DRIVERS\VX1000.sys <HKLM\System\ControlSet002\Services\VX1000>
      "c:\windows\system32\drivers\vx1000.sys" File version = 1, 3, 4, 6, File size = 1966312, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam VX1000 Device Driver, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |-250602167|0xf4fab0b9d43a65f79fc838c94006f643|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  18:57, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
    ImagePath=system32\DRIVERS\wceusbsh.sys <HKLM\System\ControlSet002\Services\wceusbsh>
      "c:\windows\system32\drivers\wceusbsh.sys" File version = 1.02.102300.0 (xpsp.080413-2108), File size = 31744, File modification date = 13/04/2008  18:45, File description = Windows CE USB Serial Host, Product Name = Windows CE USB Serial Host Driver, Product version = 1.02.102300.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |509860699|0x4c0b8ef721783f52f8e531fbdc4b1f74|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 126464, File modification date = 14/04/2008  00:12, File description = WMI Performance Adapter Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18861181|0xe0673f1106e62a68d2257e376079f821|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet002\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 913408, File modification date = 19/10/2006  02:05, File description = Windows Media Player Network Sharing Service, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |121175657|0xf74e3d9a7fa9556c3bbb14d4e5e63d3b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WSTCODEC.SYS <HKLM\System\ControlSet002\Services\WSTCODEC>
      "c:\windows\system32\drivers\wstcodec.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 19200, File modification date = 13/04/2008  18:46, File description = WDM WST Codec Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation (Copyright (C) Philips Semiconductors. 1981-1999) |-991709184|0xc98b39829c2bbd34e454150633c62c78|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet002\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 29/09/2006  00:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet002\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 29/09/2006  01:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet002\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe" <HKLM\System\ControlSet004\Services\aawservice>
      "c:\program files\lavasoft\ad-aware\aawservice.exe" File version = 7,1,0,12, File size = 611664, File modification date = 25/07/2008  16:12, File description = Ad-Aware Service, Product Name = Ad-Aware Service, Product version = 7,1,0,12, Company name = Lavasoft (Copyright (C) 2008) |1438890876|0x17067069b9a7865028c1f2e6971d0ccc|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet004\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  18:36, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet004\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  16:39, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
    ImagePath=system32\DRIVERS\AegisP.sys <HKLM\System\ControlSet004\Services\AegisP>
      "c:\windows\system32\drivers\aegisp.sys" File version = 3.2.0.3, File size = 17801, File modification date = 09/02/2008  00:42, File description = IEEE 802.1X Protocol Driver, Product Name = AEGIS Client 3.2.0.3, Product version = 3.2.0.3, Company name = Meetinghouse Data Communications (Copyright (C) Meetinghouse Data Communications 1997-2004) |1913693436|0x2c5c22990156a1063e19ad162191dc1d|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet004\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
    ImagePath=system32\DRIVERS\agp440.sys <HKLM\System\ControlSet004\Services\agp440>
      "c:\windows\system32\drivers\agp440.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 42368, File modification date = 13/04/2008  18:36, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-811459149|0x08fd04aa961bdc77fb983f328334e3d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet004\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:12, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
    ImagePath="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" <HKLM\System\ControlSet004\Services\Apple Mobile Device>
      "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" File version = 2.11.32.0, File size = 116040, File modification date = 01/10/2008  17:06, File description = Apple Mobile Device Service, Product Name = Apple Mobile Device Service, Product version = 2.11.32.0, Company name = Apple Inc. ( 2007-2008 Apple Inc. All Rights Reserved.) |1186677590|0xb8e865d24f2753a35cc2a9a6a3ce1ad4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet004\Services\Arp1394>
      "C:\WINDOWS\system32\drivers\arp1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 60800, File modification date = 13/04/2008  18:51, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |289852718|0xb5b8a80875c1dededa8b02765642c32f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet004\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 34312, File modification date = 25/07/2008  16:16, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |449120339|0x0e5e4957549056e2bf2c49f4f6b601ad|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet004\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  18:57, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet004\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  18:40, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
    ImagePath=%SystemRoot%\system32\Ati2evxx.exe <HKLM\System\ControlSet004\Services\Ati HotKey Poller>
      "C:\WINDOWS\system32\ati2evxx.exe" File version = 4.18.4060, File size = 147456, File modification date = 08/11/2002  03:22, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 4.18.4060, Company name = ATI Technologies Inc. (Copyright  1999-2002 ATI Technologies Inc.) |1548007852|0x61b40a0c3d725dbdcbc6999dd6ba4a4f|
    ImagePath=system32\DRIVERS\ati2mtag.sys <HKLM\System\ControlSet004\Services\ati2mtag>
      "c:\windows\system32\drivers\ati2mtag.sys" File version = 6.13.10.6230, File size = 539392, File modification date = 08/11/2002  03:31, File description = ATI Radeon Miniport Driver, Product Name = ATI Radeon Family, Product version = 5.1.2600.0, Company name = ATI Technologies Inc. (Copyright (C) 1998-2002 ATI Technologies Inc.) |3912840|0xb4991feb456ea3dab743bce85a5303eb|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet004\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  18:51, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet004\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=\??\C:\WINDOWS\system32\AWINDIS5.SYS <HKLM\System\ControlSet004\Services\AWINDIS5>
      "\\?\c:\windows\system32\awindis5.sys" File version = 5.00.13.50, File size = 16194, File modification date = 11/04/2002  23:43, File description = AWINDIS NDIS 5.0 Protocol Driver, Product Name = AMBIT WinDis32 Protocol Driver for Windows, Product version = 5.00.13.50, Company name = AMBIT Microsystems Corporation. (Copyright ) |-582550093|0xf62b70d3209e38a6c19a03109a25b903|
    ImagePath=system32\DRIVERS\bcm4sbxp.sys <HKLM\System\ControlSet004\Services\bcm4sbxp>
      "c:\windows\system32\drivers\bcm4sbxp.sys" File version = 3.51.0.0 built by: WinDDK, File size = 42368, File modification date = 17/12/2002  16:41, File description = Broadcom Corporation NDIS 5.1 ethernet driver, Product Name = Broadcom 440x 10/100 Integrated Controller, Product version = 3.51.0.0, Company name = Broadcom Corporation (Copyright 1998-2002, Broadcom Corporation.) |402546660|0xf5c0d3c93235a455cdd13c954adf1a80|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Bonjour\mDNSResponder.exe" <HKLM\System\ControlSet004\Services\Bonjour Service>
      "c:\program files\bonjour\mdnsresponder.exe" File version = 1,0,5,11, File size = 238888, File modification date = 29/08/2008  14:18, File description = Bonjour Service, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |1552174698|0x9efe4236f8670846b6e7c5b0eff6e715|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\CCDECODE.sys <HKLM\System\ControlSet004\Services\CCDECODE>
      "c:\windows\system32\drivers\ccdecode.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 17024, File modification date = 13/04/2008  18:46, File description = WDM Closed Caption VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123412182|0x0be5aef125be881c4f854c554f2b025c|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet004\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  18:40, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet004\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 5632, File modification date = 14/04/2008  00:12, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1393639156|0x1cfe720eb8d93a7158a4ebc3ab178bde|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet004\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1239763571|0x34cbe729f38138217f9c80212a2a0c82|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet004\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 69632, File modification date = 25/07/2008  16:17, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2052858748|0xd87acaed61e417bba546ced5e7e36d9c|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet004\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 13952, File modification date = 13/04/2008  18:36, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1342912205|0x0f6c187d38d98f8df904589a5f94d411|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet004\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 10240, File modification date = 13/04/2008  18:36, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1770663233|0x6e4c9f21f0fae8940661144f41b13203|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet004\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet004\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  18:40, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet004\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.5512.503.0, File size = 224768, File modification date = 14/04/2008  00:12, File description = Logical Disk Manager service process, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |1983501827|0xe46050330bd42f33609117f861e32d3c|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet004\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  18:44, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet004\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  18:44, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet004\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 04/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet004\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet004\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k dot3svc <HKLM\System\ControlSet004\Services\Dot3svc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:11, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet004\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k eapsvcs <HKLM\System\ControlSet004\Services\EapHost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet004\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=\??\C:\WINDOWS\system32\drivers\fanio.sys <HKLM\System\ControlSet004\Services\fanio>
      "\\?\c:\windows\system32\drivers\fanio.sys" File version = 2.2, File size = 20480, File modification date = 21/10/2006  21:26, File description = I8k Fan I/O, Product Name = fanio.sys, Product version = 2.2, Company name = Christian Diefer ((c) 2001-2006 Christian Diefer) |383413257|0x8b5c73dfb031d5d5112cd7be5b0f85ad|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\fltmgr.sys <HKLM\System\ControlSet004\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  18:32, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
    ImagePath=c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe <HKLM\System\ControlSet004\Services\FontCache3.0.0.0>
      "c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe" File version = 3.0.6920.1427 built by: SP, File size = 46104, File modification date = 30/07/2008  02:10, File description = PresentationFontCache.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.6920.1427, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1802830677|0x8ba7c024070f2b7fdd98ed8a4ba41789|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet004\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 04/08/2004  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet004\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  18:56, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet004\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 10368, File modification date = 13/04/2008  18:45, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738735441|0xccf82c5ec8a7326c3066de870c06daf1|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\hkmsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet004\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  18:53, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet004\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet004\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:18, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
    ImagePath="C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" <HKLM\System\ControlSet004\Services\IDriverT>
      "c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe" File version = 11.00.28844, File size = 69632, File modification date = 04/04/2005  05:41, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 11.00, Company name = Macrovision Corporation (Copyright (C) 2005 Macrovision Corporation) |798943343|0x1cf03c69b49acb70c722df92755c0c8c|
    ImagePath="c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" <HKLM\System\ControlSet004\Services\idsvc>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe" File version = 3.0.4506.2152 (SP.030729-0100), File size = 881664, File modification date = 30/07/2008  00:24, File description = Windows CardSpace, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.2152, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |973074649|0xc01ac32dc5c03076cfb852cb5da5229c|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet004\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  18:40, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet004\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 150528, File modification date = 14/04/2008  00:12, File description = Image Mastering API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-311014|0x30deaf54a9755bb8546168cfe8a6b5e1|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet004\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:40, File description = Intel PCI IDE Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-926823474|0xb5466a9250342a7aa0cd1fba13420678|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet004\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  18:31, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
    ImagePath=system32\drivers\ip6fw.sys <HKLM\System\ControlSet004\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  18:53, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet004\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 04/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet004\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  18:57, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet004\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  18:57, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet004\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:19, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet004\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  18:54, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet004\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  18:36, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
    ImagePath="C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" <HKLM\System\ControlSet004\Services\JavaQuickStarterService>
      "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.110.3, File size = 152984, File modification date = 22/02/2009  21:02, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U11, Product version = 6.0.110.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |2007827971|0x32192b4ebe8720ed8d49a455c962cb91|
      "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 41207, File modification date = 22/02/2009  21:02, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1257361429|0xb59edd1d5295225bec3fa87cdb1876ff|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet004\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  18:39, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet004\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  18:45, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe"  -s "C:\Program Files\Linksys\Linksys Updater\conf\wrapper.conf" <HKLM\System\ControlSet004\Services\LinksysUpdater>
      "c:\program files\linksys\linksys updater\bin\linksysupdater.exe" File version = (null), File size = 204800, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2007040741|0x06dc2fdc6282f0d68910417b1150c848|
      "c:\program files\linksys\linksys updater\conf\wrapper.conf" File version = (null), File size = 2442, File modification date = 15/01/2008  14:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1890676943|0x87a811c19a08c115f700834c42d706eb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\mam4410c.sys <HKLM\System\ControlSet004\Services\mam4410c>
      "c:\windows\system32\drivers\mam4410c.sys" File version = 1, 1, 1, 7, File size = 24784, File modification date = 16/06/2005  22:11, File description = USB Common Control Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 7, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |-305291688|0x494daad7dab01d160c37ae7d99b00de6|
    ImagePath=System32\Drivers\mam4410m.sys <HKLM\System\ControlSet004\Services\mam4410m>
      "c:\windows\system32\drivers\mam4410m.sys" File version = 1, 1, 1, 9, File size = 25044, File modification date = 16/06/2005  22:13, File description = USB Common Modem Driver, Product Name = Handset Manager, Product version = 1, 1, 1, 9, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |425162036|0xb2434b4f7827798abecd2103fb8f64a5|
    ImagePath=System32\Drivers\mam4410u.sys <HKLM\System\ControlSet004\Services\mam4410u>
      "c:\windows\system32\drivers\mam4410u.sys" File version = 1, 41, 1, 6, File size = 52309, File modification date = 19/03/2007  18:39, File description = Usb Bus Driver, Product Name = Handset Manager, Product version = 1, 41, 1, 6, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All Rights Reserved.) |2075266820|0x5020e06ad2c3551a1f37cf2d48ebc418|
    ImagePath=system32\DRIVERS\MaVc2K.sys <HKLM\System\ControlSet004\Services\MaVctrl>
      "c:\windows\system32\drivers\mavc2k.sys" File version = 1, 1, 2, 2, File size = 11986, File modification date = 16/01/2007  15:44, File description = Mobile Action Virtual Control, Product Name = Handset Manager, Product version = 1, 1, 2, 2, Company name = Mobile Action Technology Inc. ((C) Mobile Action Technology Inc. All rights reserved.) |-1584420214|0x8181ceb341cbb2f7f893f85b915d5e15|
    ImagePath=C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe <HKLM\System\ControlSet004\Services\mcmscsvc>
      "c:\program files\mcafee\msc\mcmscsvc.exe" File version = 8,1,159,0, File size = 767976, File modification date = 09/01/2008  20:50, File description = McAfee Services, Product Name = McAfee SecurityCenter, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1752091033|0xcb3a8976de2f65349322da7627cea223|
    ImagePath="c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe" <HKLM\System\ControlSet004\Services\McNASvc>
      "c:\program files\common files\mcafee\mna\mcnasvc.exe" File version = 2,1,143,0, File size = 2458128, File modification date = 25/01/2008  06:38, File description = McAfee Network Agent, Product Name = McAfee Integrated Security Platform, Product version = 2,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-1042702043|0xc69e71e00b30b60556d3e096699bd423|
    ImagePath=C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe <HKLM\System\ControlSet004\Services\McODS>
      "c:\program files\mcafee\virusscan\mcods.exe" File version = 12,0,172,0, File size = 378184, File modification date = 07/11/2007  14:35, File description = McAfee VirusScan - On Demand Scan, Product Name = McAfee VirusScan, Product version = 12,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-691597899|0x21456f3051cbefd1f2d60d8b9ab9c6ee|
    ImagePath=c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe <HKLM\System\ControlSet004\Services\McProxy>
      "c:\program files\common files\mcafee\mcproxy\mcproxy.exe" File version = 2,0,150,0, File size = 359248, File modification date = 15/08/2007  17:36, File description = McAfee Proxy Service Module, Product Name = McAfee Proxy, Product version = 2,0,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1165250198|0x8cf3da0be6094c34d7c4a85493e60547|
    ImagePath=C:\Program Files\McAfee\VirusScan\McShield.exe <HKLM\System\ControlSet004\Services\McShield>
      "c:\program files\mcafee\virusscan\mcshield.exe" File version = VSCORE.14.0.0.349.x86, File size = 144704, File modification date = 24/07/2007  17:02, File description = On-Access Scanner service, Product Name = VSCORE.14.0.0.349.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1011349640|0x33734abfa52ec8d096a1254d645e9b4f|
    ImagePath=C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe <HKLM\System\ControlSet004\Services\McSysmon>
      "c:\program files\mcafee\virusscan\mcsysmon.exe" File version = 12,1,111,0, File size = 695624, File modification date = 05/12/2007  15:04, File description = McAfee SystemGuards Service, Product Name = McAfee VirusScan API, Product version = 12,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |1764132594|0xfd47df2bcc3544df65b01ad6b6062430|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\mfeavfk.sys <HKLM\System\ControlSet004\Services\mfeavfk>
      "C:\WINDOWS\system32\drivers\mfeavfk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 79304, File modification date = 22/11/2007  11:44, File description = Anti-Virus File System Filter Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1807686372|0xc97cbfd71c1c215150a3b3e55f77a7a3|
    ImagePath=system32\drivers\mfebopk.sys <HKLM\System\ControlSet004\Services\mfebopk>
      "C:\WINDOWS\system32\drivers\mfebopk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 35240, File modification date = 22/11/2007  11:44, File description = Buffer Overflow Protection Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1961186230|0x5447338b83a1a2354fb2fea7604387fd|
    ImagePath=system32\drivers\mfehidk.sys <HKLM\System\ControlSet004\Services\mfehidk>
      "C:\WINDOWS\system32\drivers\mfehidk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 201320, File modification date = 22/11/2007  11:44, File description = Host Intrusion Detection Link Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |-1081701495|0x6c9a6ed60b8fc3baf72fe1b1d096445b|
    ImagePath=system32\drivers\mferkdk.sys <HKLM\System\ControlSet004\Services\mferkdk>
      "c:\windows\system32\drivers\mferkdk.sys" File version = SYSCORE.14.0.0.291.x86, File size = 33832, File modification date = 22/11/2007  11:44, File description = VSCore Code Analysis Driver, Product Name = SYSCORE.14.0.0.291.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |1104730757|0xa551154b51d6a93fccf70fc4e8eaf4bd|
    ImagePath=system32\drivers\mfesmfk.sys <HKLM\System\ControlSet004\Services\mfesmfk>
      "C:\WINDOWS\system32\drivers\mfesmfk.sys" File version = SYSCORE.14.0.0.284.x86, File size = 40488, File modification date = 02/12/2007  17:51, File description = System Monitor Filter Driver, Product Name = SYSCORE.14.0.0.284.x86, Product version = (null), Company name = McAfee, Inc. (Copyright 1995-2007 McAfee, Inc. All Rights Reserved.) |627931775|0x299a86b780c9627aaa24e74292363ed2|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet004\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.5512, File size = 32768, File modification date = 14/04/2008  00:12, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1996-2001) |2042102201|0xd18f1f0c101d06a1c1adf26eed16fcdd|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet004\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 13/04/2008  18:39, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet004\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 17/08/2001  18:48, File description = HID Mouse Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273853103|0xb1c303e17fb9d46e87a98e4ba6769685|
    ImagePath=System32\Drivers\Mpfp.sys <HKLM\System\ControlSet004\Services\MPFP>
      "c:\windows\system32\drivers\mpfp.sys" File version = 9.0.114.0, File size = 113952, File modification date = 13/07/2007  11:20, File description = McAfee Personal Firewall Plus Driver, Product Name = McAfee Personal Firewall Plus, Product version = 9.0.114.0, Company name = McAfee, Inc. (Copyright (c) 2007 McAfee, Inc. All rights reserved.) |2104134654|0xe454f42ae5524d695d76eab5d363b8ac|
    ImagePath="C:\Program Files\McAfee\MPF\MPFSrv.exe" <HKLM\System\ControlSet004\Services\MpfService>
      "c:\program files\mcafee\mpf\mpfsrv.exe" File version = 9.0.136.0, File size = 856864, File modification date = 18/07/2007  17:54, File description = McAfee Personal Firewall Service, Product Name = McAfee Personal Firewall, Product version = 9.0.136.0, Company name = McAfee, Inc. (Copyright  2007 McAfee, Inc. All Rights Reserved.) |-1578675555|0x346f30f1ff73553aa466f4ae7948da00|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet004\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  18:32, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet004\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet004\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.700, File size = 6144, File modification date = 14/04/2008  00:12, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |1236211169|0xa137f1470499a205abbb9aafb3b6f2b1|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet004\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4001.5512, File size = 78848, File modification date = 14/04/2008  00:12, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-990287589|0x5879d691e842574a20fe63817cb76df9|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet004\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  18:39, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet004\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  18:39, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet004\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  18:39, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet004\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 13/04/2008  18:36, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
    ImagePath=system32\drivers\MSTEE.sys <HKLM\System\ControlSet004\Services\MSTEE>
      "c:\windows\system32\drivers\mstee.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5504, File modification date = 13/04/2008  18:39, File description = WDM Tee/Communication Transform Filter , Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208985106|0xe53736a9e30c45fa9e7b5eac55056d1d|
    ImagePath=system32\DRIVERS\NABTSFEC.sys <HKLM\System\ControlSet004\Services\NABTSFEC>
      "c:\windows\system32\drivers\nabtsfec.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 85248, File modification date = 13/04/2008  18:46, File description = WDM NABTS/FEC VBI Codec, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-702127793|0x5b50f1b2a2ed47d560577b221da734db|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\napagent>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\NdisIP.sys <HKLM\System\ControlSet004\Services\NdisIP>
      "c:\windows\system32\drivers\ndisip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 10880, File modification date = 13/04/2008  18:46, File description = Microsoft IP Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-495085904|0x7ff1f1fd8609c149aa432f95a8163d97|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet004\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  18:57, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet004\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 13/04/2008  18:55, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet004\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:20, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet004\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  18:56, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet004\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:21, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet004\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet004\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:12, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=system32\DRIVERS\wg511nd5.sys <HKLM\System\ControlSet004\Services\NETGEAR_WG511_SERVICE>
      "c:\windows\system32\drivers\wg511nd5.sys" File version = 4.0.0.140, File size = 449888, File modification date = 25/07/2005  22:48, File description = Driver for Atheros AR5001 Wireless Network Adapter, Product Name = Atheros AR5001 Wireless Network Adapter, Product version = 4.0.0.140, Company name = Atheros Communications, Inc. (2001-2004 Atheros Communications, Inc. All Rights Reserved.) |-2056780248|0x8a91fd656d0832195eafb6cb45b06c27|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet004\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" <HKLM\System\ControlSet004\Services\NetTcpPortSharing>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe" File version = 3.0.4506.2152 (SP.030729-0100), File size = 132096, File modification date = 30/07/2008  00:16, File description = SMSvcHost.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.2152, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-117179601|0xd34612c5d02d026535b3095d620626ae|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet004\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61824, File modification date = 13/04/2008  18:51, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-664318305|0xe9e47cfb2d461fa0fc75b7a74c6383ea|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet004\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet004\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 04/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet004\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 04/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet004\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 61696, File modification date = 13/04/2008  18:46, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1583879848|0xca33832df41afb202ee7aeb05145922f|
    ImagePath=\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS <HKLM\System\ControlSet004\Services\OMCI>
      "C:\WINDOWS\system32\drivers\omci.sys" File version = 6, 1, 0, 242, File size = 13632, File modification date = 22/08/2001  13:42, File description = OMCI Device Driver, Product Name = OMCI Driver, Product version = 6, 1, 0, 242, Company name = Dell Computer Corporation (Copyright  Dell Computer Corp. 2000) |924069296|0xcec7e2c6c1fa00c7ab2f5434f848ae51|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet004\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  18:36, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet004\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  18:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet004\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 120192, File modification date = 13/04/2008  18:36, File description = PCMCIA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34174239|0x9e89ef60e9ee05e3f2eef2da7397f1c1|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet004\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 108544, File modification date = 14/04/2008  00:12, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-73071318|0x0e776ed5f7cc9f94299e70461b7b8185|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet004\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet004\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:19, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet004\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet004\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  18:56, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet004\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 04/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\ptserial.sys <HKLM\System\ControlSet004\Services\Ptserial>
      "c:\windows\system32\drivers\ptserial.sys" File version = 2.50.47, File size = 135292, File modification date = 24/02/2003  20:30, File description = HSP Modem Serial Device Driver for NT 5.0, Product Name = HSP Modem Serial Device, Product version = 2.50.47, Company name = PCTEL, INC. (Copyright (C) PCTEL. 1994-2003) |1334016457|0x6a3fbbbba5f228b003ef64070f7b3fe4|
    ImagePath=system32\DRIVERS\OVCD.sys <HKLM\System\ControlSet004\Services\QCDonner>
      "c:\windows\system32\drivers\ovcd.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 28032, File modification date = 17/08/2001  20:05, File description = Video Minidriver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( 1996-2000 Logitech.  All rights reserved.) |-1990550668|0xfddd1aeb9f81ef1e6e48ae1edc2a97d6|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet004\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 04/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet004\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:19, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet004\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  18:57, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet004\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 04/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet004\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:28, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet004\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 04/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet004\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  18:32, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet004\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 141312, File modification date = 14/04/2008  00:12, File description = Microsoft Remote Desktop Help Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |283819399|0x3c37bf86641bda977c3bf8a840f3b7fa|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet004\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 13/04/2008  18:40, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet004\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 75264, File modification date = 14/04/2008  00:12, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2066066351|0xaaed593f84afa419bbae8572af87cf6a|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet004\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 399360, File modification date = 14/04/2008  00:12, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-15108627|0x2589fe6015a316c0f5d5112b4da7b509|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet004\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 04/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet004\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:12, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet004\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 95744, File modification date = 14/04/2008  00:12, File description = Smart Card Resource Management Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |584144454|0x86d007e7a654b9a71d1d7d856b104353|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\drivers\scsiport.sys <HKLM\System\ControlSet004\Services\ScsiPort>
      "C:\WINDOWS\system32\drivers\scsiport.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96384, File modification date = 13/04/2008  18:40, File description = SCSI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-893441374|0x76c465f570e90c28942d52ccb2580a10|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet004\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = 4.03.086, File size = 20480, File modification date = 13/11/2007  10:25, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\sis163u.sys <HKLM\System\ControlSet004\Services\SIS163u>
      "c:\windows\system32\drivers\sis163u.sys" File version = 5.1.1039.1020, File size = 167424, File modification date = 31/12/2004  22:46, File description = SiS163 usb Wireless LAN Adapter Driver, Product Name = NDIS NIC Driver, Product version = 5.1.1039.1020, Company name = SiS Corporation (SiS Corporation) |1676611955|0x24c563c9ab67db0d80070c8e0945ff87|
    ImagePath=C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe <HKLM\System\ControlSet004\Services\SiSWLSvc>
      "c:\program files\802.11 wireless lan\802.11g pen size wireless usb 2.0 adapter hw.32 v1.10\siswlsvc.exe" File version = (null), File size = 45056, File modification date = 31/12/2004  22:47, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |971795479|0xe2892f92c40807cf20b4f0132c8e0aef|
    ImagePath=system32\DRIVERS\SLIP.sys <HKLM\System\ControlSet004\Services\SLIP>
      "c:\windows\system32\drivers\slip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 11136, File modification date = 13/04/2008  18:46, File description = Microsoft Slip Deframing Filter Minidriver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1964362680|0x866d538ebe33709a5c9f5c62b73b7d14|
    ImagePath=system32\DRIVERS\SONYPVU1.SYS <HKLM\System\ControlSet004\Services\SONYPVU1>
      "c:\windows\system32\drivers\sonypvu1.sys" File version = 1.3.0526.0 (XPClient.010817-1148), File size = 7552, File modification date = 17/08/2001  18:56, File description = Sony USB Lower Filter driver, Product Name = Sony USB Lower Filter driver, Product version = 1.3.0526.0, Company name = Sony Corporation (Copyright 1999,2000 Sony Corporation) |740166423|0xa1eceeaa5c5e74b2499eb51d38185b84|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet004\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  18:45, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet004\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:12, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
    ImagePath="C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe" /service /P ddoctorv2 <HKLM\System\ControlSet004\Services\sprtsvc_ddoctorv2>
      "c:\program files\comcast\desktop doctor\bin\sprtsvc.exe" File version = 7.0.940.0, File size = 202560, File modification date = 24/04/2008  17:26, File description = SupportSoft Agent Service, Product Name = SupportSoft sprtsvc, Product version = 7.0.940.0, Company name = SupportSoft, Inc. (Copyright 1997-2008 SupportSoft) |-1245770320|0xc3716ec0d36ad924b6888d794563e647|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet004\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  18:36, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet004\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\STAC97.sys <HKLM\System\ControlSet004\Services\STAC97>
      "c:\windows\system32\drivers\stac97.sys" File version = 5.10.3952, File size = 264440, File modification date = 15/11/2004  20:37, File description = SigmaTel Audio Driver (WDM), Product Name = AC'97 Audio Controller with SigmaTel CODEC device driver., Product version = 5.10.3952, Company name = SigmaTel, Inc. (Copyright (c) SigmaTel, Inc.2000-2003) |-552391336|0x5813d453ef8ce49d607c255cf128aceb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet004\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\StreamIP.sys <HKLM\System\ControlSet004\Services\streamip>
      "c:\windows\system32\drivers\streamip.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 15232, File modification date = 13/04/2008  18:46, File description = Microsoft IP Test Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |735896275|0x77813007ba6265c4b6098187e6ed79d2|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet004\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 13/04/2008  18:39, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet004\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  18:45, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet004\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet004\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 89600, File modification date = 14/04/2008  00:12, File description = Performance Logs and Alerts Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |862147980|0xc7abbc59b43274b1109df6b24d617051|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet004\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 20/06/2008  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-946646010|0x9aefa14bd6b182d61e3119fa5f436d3d|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet004\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:13, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet004\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet004\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 73216, File modification date = 14/04/2008  00:12, File description = Telnet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059603438|0xdb7205804759ff62c34e3efd8a4cc76a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet004\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  18:39, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet004\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18432, File modification date = 14/04/2008  00:12, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1705983588|0x05365fb38fca1e98f7a566aaaf5d1815|
    ImagePath=System32\Drivers\usbaapl.sys <HKLM\System\ControlSet004\Services\USBAAPL>
      "c:\windows\system32\drivers\usbaapl.sys" File version = 1, 38, 0, 0, File size = 32000, File modification date = 01/10/2008  17:01, File description = Apple Mobile Device USB Driver, Product Name = Apple Mobile Device USB Driver, Product version = 1.38.0.0, Company name = Apple, Inc. ( Apple, Inc.  All rights reserved.) |454820262|0xc1ca131f4e3ed63d6bc89a35ffad4cda|
    ImagePath=system32\drivers\usbaudio.sys <HKLM\System\ControlSet004\Services\usbaudio>
      "c:\windows\system32\drivers\usbaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60032, File modification date = 13/04/2008  18:45, File description = USB Audio Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-759054567|0xe919708db44ed8543a7c017953148330|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet004\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 32128, File modification date = 13/04/2008  18:45, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1127277154|0x173f317ce0db8e21322e71b7e60a27e8|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet004\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  18:45, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet004\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  18:45, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet004\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  18:45, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet004\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  18:45, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet004\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  18:45, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet004\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  18:44, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
    ImagePath=system32\DRIVERS\vmodem.sys <HKLM\System\ControlSet004\Services\Vmodem>
      "c:\windows\system32\drivers\vmodem.sys" File version = 2.50.50, File size = 690973, File modification date = 30/05/2003  22:50, File description = HSP Modem Modem Device Driver, Product Name = HSP Modem Modem Device, Product version = 2.50.50, Company name = PCTEL, INC. (Copyright PCtel, Inc.1994-2003) |-189503282|0x09c2fcd4e379e6ab804a58caa2a3508b|
    ImagePath=system32\DRIVERS\vpctcom.sys <HKLM\System\ControlSet004\Services\Vpctcom>
      "c:\windows\system32\drivers\vpctcom.sys" File version = 2.50-9K, File size = 477403, File modification date = 30/05/2003  23:45, File description = HSP Modem Virtual Control Device, Product Name = HSP Modem Virtual Control Device, Product version = 2.50-9K, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-2000) |1122360456|0x081bc31edda73d40defd347e580f9144|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet004\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 289792, File modification date = 14/04/2008  00:12, File description = Microsoft Volume Shadow Copy Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |64155087|0x7a9db3a67c333bf0bd42e42b8596854b|
    ImagePath=system32\DRIVERS\vvoice.sys <HKLM\System\ControlSet004\Services\Vvoice>
      "c:\windows\system32\drivers\vvoice.sys" File version = 3.53.00, File size = 66111, File modification date = 28/05/2003  17:08, File description = HSP Modem device driver, Product Name = PCTEL HSP Modem Voice Device, Product version = 3.53.00, Company name = PCtel, Inc. (Copyright PCtel, Inc.1994-1998) |-1457973619|0xdb18922f81e90d95e69f45ab8e9fc5c1|
    ImagePath=system32\DRIVERS\VX1000.sys <HKLM\System\ControlSet004\Services\VX1000>
      "c:\windows\system32\drivers\vx1000.sys" File version = 1, 3, 4, 6, File size = 1966312, File modification date = 10/04/2007  21:46, File description = Microsoft LifeCam VX1000 Device Driver, Product Name = Microsoft LifeCam, Product version = 1.3, Company name = Microsoft Corporation ( 2006 Microsoft Corporation) |-250602167|0xf4fab0b9d43a65f79fc838c94006f643|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet004\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  18:57, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
    ImagePath=system32\DRIVERS\wceusbsh.sys <HKLM\System\ControlSet004\Services\wceusbsh>
      "c:\windows\system32\drivers\wceusbsh.sys" File version = 1.02.102300.0 (xpsp.080413-2108), File size = 31744, File modification date = 13/04/2008  18:45, File description = Windows CE USB Serial Host, Product Name = Windows CE USB Serial Host Driver, Product version = 1.02.102300.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |509860699|0x4c0b8ef721783f52f8e531fbdc4b1f74|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet004\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet004\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet004\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 126464, File modification date = 14/04/2008  00:12, File description = WMI Performance Adapter Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18861181|0xe0673f1106e62a68d2257e376079f821|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet004\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 913408, File modification date = 19/10/2006  02:05, File description = Windows Media Player Network Sharing Service, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |121175657|0xf74e3d9a7fa9556c3bbb14d4e5e63d3b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WSTCODEC.SYS <HKLM\System\ControlSet004\Services\WSTCODEC>
      "c:\windows\system32\drivers\wstcodec.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 19200, File modification date = 13/04/2008  18:46, File description = WDM WST Codec Driver, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation (Copyright (C) Philips Semiconductors. 1981-1999) |-991709184|0xc98b39829c2bbd34e454150633c62c78|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet004\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 29/09/2006  00:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet004\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 29/09/2006  01:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet004\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet004\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:12, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet001\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 588800, File modification date = 14/04/2008  00:12, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347235898|0x23043c91a0f9dfb4b9e9f87b680863b4|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\system32\ieudinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}>
      "c:\windows\system32\ieudinit.exe" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 13824, File modification date = 19/12/2008  09:10, File description = IE Per User Active Setup Uninstall Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |972453730|0xcfab4f88d8889820e6adbf3f0156d1ad|
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 11.0.5721.5235 (WMP_11.070626-2109), File size = 317440, File modification date = 27/06/2007  03:10, File description = Microsoft Windows Media Player Setup Utility, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5235, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1472613693|0xd0cb8deaf008d7cdc794ef6a37ec8134|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 45056, File modification date = 14/04/2008  00:12, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-385946341|0x2b86c9eee08af3b536203f1a13b464b5|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\iedkcs32.dll" File version = 17.00.6000.16791 (vista_gdr.081217-1620), File size = 384512, File modification date = 20/12/2008  23:15, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 17.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-249694459|0xb1171fc16d2e4a0551a4cdfdc49de699|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 45056, File modification date = 14/04/2008  00:12, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-385946341|0x2b86c9eee08af3b536203f1a13b464b5|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 11776, File modification date = 14/04/2008  00:12, File description = Microsoft(C) Register Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |310448307|0xfbdb9d0935b9907b809b381fddf1627f|
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:12, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 73216, File modification date = 14/04/2008  00:12, File description = Outlook Express Setup Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |708047487|0x8058c01e0b96ec2f74ff764be1b67d7f|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 04/08/2004  12:00, File description = Windows User-interface core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1449542862|0xf002378c8416d21c4b7ed1b15398e647|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 124928, File modification date = 20/12/2008  23:15, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057239800|0xfc2c6d8a225fd6dadf7d018689ab129b|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 46281, File modification date = 04/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-904713119|0xed4041a9ee05c427d25a59d82bc3712e|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser <HKLM\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 124928, File modification date = 20/12/2008  23:15, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057239800|0xfc2c6d8a225fd6dadf7d018689ab129b|
      "c:\windows\inf\msmsgs.inf" File version = (null), File size = 51427, File modification date = 04/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1743219520|0xef5175ce56d762931c468699b935b8ed|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 124928, File modification date = 20/12/2008  23:15, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057239800|0xfc2c6d8a225fd6dadf7d018689ab129b|
      "c:\windows\inf\wmp11.inf" File version = (null), File size = 2428, File modification date = 25/08/2006  23:09, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-398406587|0xde9a9b74beae47e09dc67e44658055e4|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 73216, File modification date = 14/04/2008  00:12, File description = Outlook Express Setup Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |708047487|0x8058c01e0b96ec2f74ff764be1b67d7f|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 04/08/2004  12:00, File description = Windows User-interface core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1449542862|0xf002378c8416d21c4b7ed1b15398e647|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 11776, File modification date = 14/04/2008  00:12, File description = Microsoft(C) Register Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |310448307|0xfbdb9d0935b9907b809b381fddf1627f|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -BaseSettings <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "c:\windows\system32\ie4uinit.exe" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 70656, File modification date = 19/12/2008  09:10, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1957150577|0xb9e08f289729290c827e78d5ab61228f|
    StubPath=c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install <HKLM\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\mscories.dll" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 83968, File modification date = 25/07/2008  16:16, File description = Microsoft .NET IE SECURITY REGISTRATION, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1380120349|0x4ee2a4b37555865ca58011b83df40245|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 04/08/2004  12:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 04/08/2004  12:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 68768, File modification date = 04/08/2004  12:00, File description = System APIs for Multimedia, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-1249710885|0xbac7ca4576ef5509f336f5b007dc195b|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 04/08/2004  12:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 04/08/2004  12:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 04/08/2004  12:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 109568, File modification date = 14/04/2008  00:12, File description = Program Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1830408332|0xb703072af60373aebc8f0ba1ea211f5e|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 04/08/2004  12:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 04/08/2004  12:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4048, File modification date = 04/08/2004  12:00, File description = Timer driver for PC compatibles, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-250810258|0x9e7425234addedabc7bf7addafd72fd9|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:11, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 16384, File modification date = 14/04/2008  00:09, File description = IMA ADPCM CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-177085329|0x577e496f0d41411bf149394d80959d53|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 14848, File modification date = 14/04/2008  00:10, File description = Microsoft ADPCM CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-16203509|0xc5648be5409e0aabda8c9047bac8f603|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 04/08/2004  12:00, File description = Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-431117150|0x33271a2667334b9a8842c65a079ef375|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 04/08/2004  12:00, File description = Microsoft GSM 6.10 Audio CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2046612480|0x3a9846e207dafc13009c048a2f6f8c2a|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 04/08/2004  12:00, File description = DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50, Product Name = DSP GROUP Windows NT(TM) TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. (Copyright DSP Group, Inc. 1993-1996) |-579275559|0xe8cd0d7e169ecce2d4fd829daab786ed|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 14/04/2008  00:11, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1151350447|0x7e86d471ef8ded7b9d15106002120271|
    VIDC.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.5512, File size = 294912, File modification date = 14/04/2008  00:12, File description = Microsoft H.263 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |-2876714|0x7d529aa41ea993357f8c3d7e92c2372a|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 04/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-442479925|0x43eca1576906ba76fb3e329a338a3cae|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 04/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-442479925|0x43eca1576906ba76fb3e329a338a3cae|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 14/04/2008  00:12, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-78186968|0x948e1498c6438625247f94534aaa82fe|
    VIDC.IYUV=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 47616, File modification date = 14/04/2008  00:11, File description = Intel Indeo(R) Video YUV Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright Intel Corporation 1992-1997) |-1502235171|0xf201b7fe27967bc6ec3fa37619646439|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 11264, File modification date = 14/04/2008  00:12, File description = Microsoft RLE Compressor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1541921595|0x374140237756d58bb842657462a0df1d|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 04/08/2004  12:00, File description = Microsoft Video 1 Compressor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-329319647|0x6ef2b7676e92b9452aab164339b69084|
    VIDC.UYVY=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:12, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    VIDC.YUY2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:12, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    VIDC.YVU9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 18/08/2001  04:36, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-438656468|0x1a235b74c54f236b7667ab67e8ae3820|
    VIDC.YVYU=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:12, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 04/08/2004  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 04/08/2004  12:00, File description = Microsoft G.723.1 CODEC for MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |866580183|0xb87f759738c52e8d6fbcdaaa84c6486f|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.5512, File size = 294912, File modification date = 14/04/2008  00:12, File description = Microsoft H.263 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |-2876714|0x7d529aa41ea993357f8c3d7e92c2372a|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.5512, File size = 188416, File modification date = 14/04/2008  00:12, File description = Microsoft H.261 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |563769225|0xc6fd300a6100ac89bc4cb944c19fa2a9|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 14/04/2008  00:10, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |-1889729102|0xcb9c24e95606a65397d1a00928ba9b77|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 14/04/2008  00:10, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |2086205860|0x0dbb250a89e2e1c9281009ac269f0805|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 14/04/2008  00:12, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-1262740183|0x877c90686858d899b042bba45e9b7f2c|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 14/04/2008  00:11, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1209309798|0x5f10dc19d92ccf6b719b494572f4f74b|
    msacm.l3acm=l3codecx.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codecx.acm" File version = 1, 9, 0, 0401, File size = 135168, File modification date = 02/07/1999  09:00, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |1626498871|0xf5cdb60ac042d272194f907d799f39a4|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    VIDC.MP42=mpg4c32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\mpg4c32.dll" File version = 3.01.0.2954, File size = 254272, File modification date = 29/10/1998  16:34, File description = Microsoft MPEG-4 Video Codec, Product Name = Microsoft MPEG-4 Video Codec, Product version = 3.01.0.2954, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-1998) |-883101021|0x039dba79d420276088cd5d7e5b052a4d|
    VIDC.MPG4=mpg4c32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\mpg4c32.dll" File version = 3.01.0.2954, File size = 254272, File modification date = 29/10/1998  16:34, File description = Microsoft MPEG-4 Video Codec, Product Name = Microsoft MPEG-4 Video Codec, Product version = 3.01.0.2954, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-1998) |-883101021|0x039dba79d420276088cd5d7e5b052a4d|
    wave1=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    midi1=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    mixer1=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    MSVideo8=VfWWDM32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vfwwdm32.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 53760, File modification date = 14/04/2008  00:12, File description = VfW MM Driver for WDM Video Capture Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1696627522|0xe2a57ac21705d3a05bb89be201fa5c0c|
    wave2=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    mixer2=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    wave3=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    mixer3=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:12, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "C:\WINDOWS\system32\stobject.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 121856, File modification date = 14/04/2008  00:12, File description = Systray shell service object, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-505515755|0x50512fc9b7878e3c2c147bc17326a7db|
    WPDShServiceObj={AAA288BA-9A4C-45B0-95D7-94D524869DB5} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\wpdshserviceobj.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 19/10/2006  03:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:12, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:12, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:12, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=C:\WINDOWS\system32\scrnsave.scr <HKEY_USERS\S-1-5-21-1844237615-842925246-854245398-1003\Control Panel\Desktop>
      "c:\windows\system32\scrnsave.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 9216, File modification date = 14/04/2008  00:12, File description = Default Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |278344909|0x7ba27a296ee84861bfe97b96874ccaa6|
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:12, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 618496, File modification date = 14/04/2008  00:12, File description = Control Panel Drivers Applet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611903034|0x0f93f0a941dc94b83be820f51174695d|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 04/08/2004  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39936, File modification date = 14/04/2008  00:12, File description = Security Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1786151644|0xf99b7c7118733f1cd1713fc6a5473c1d|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 04/08/2004  12:00, File description = OLE DocFile Property Page, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2085292712|0x3d4f2a08c0d060b62894c1d1a25b5125|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:12, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
    {41E300E0-78B6-11ce-849B-444553540000}
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:12, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16384, File modification date = 04/08/2004  12:00, File description = Advanced display adapter properties, Product Name = Microsoft Windows Operating System, Product version = 6.00.2600.0000, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-696121066|0x188b7b757549d7fff3a398fe5b96ab57|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 04/08/2004  12:00, File description = Advanced display monitor properties, Product Name = Microsoft Windows Operating System, Product version = 6.00.2600.0000, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2072485570|0x74e6c29348cf7f474ae6dbe4421fe624|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 51200, File modification date = 14/04/2008  00:11, File description = Directory Service Security UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1008566686|0x843176bf01f4208675d6c71ce7b13325|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:12, File description = Compatibility Tab Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |500308471|0xca59c3256b6f4f2decb9890f304da473|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 27648, File modification date = 14/04/2008  00:12, File description = Shell scrap object handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1287773517|0xbb6df8ec2f2aaf61de7cf7e721af963a|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1504256, File modification date = 14/04/2008  00:11, File description = Windows DiskCopy, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |596725467|0xd62e7a444ffba599a49c0bf93fb004f1|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14336, File modification date = 04/08/2004  12:00, File description = Network object shell UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1584020191|0x00cf98b20e2dc88500b72c47226b8c59|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 04/08/2004  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 04/08/2004  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 560640, File modification date = 14/04/2008  00:12, File description = Print UI DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1241821517|0xb2cf9f1f606dec23f70a40b01df3c396|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 155648, File modification date = 14/04/2008  00:11, File description = Windows Shell Disk Quota UI DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-217597258|0xdd4906169d7f99f582276fc4d478c986|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 191488, File modification date = 14/04/2008  00:12, File description = Windows Briefcase, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-412451629|0xa60fc9ca376dba1235c63e960996f013|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 04/08/2004  12:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |369345011|0xf759a6e14403bc3d7a55ccad1b8f7b4a|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 382976, File modification date = 14/04/2008  00:11, File description = Windows Font Folder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1496405538|0xe518b7e8b372ee8dc9868946faa8c4c4|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 04/08/2004  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39936, File modification date = 14/04/2008  00:12, File description = Security Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1786151644|0xf99b7c7118733f1cd1713fc6a5473c1d|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:12, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 04/08/2004  12:00, File description = Advanced display performance properties, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1114691037|0x2591cd8d4654ae3c7d5b83d582fb6c2b|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 53760, File modification date = 14/04/2008  00:11, File description = Crypto Shell Extensions, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1270500552|0x95c9810ee06a6302c7330b295cfe4ba5|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 53760, File modification date = 14/04/2008  00:11, File description = Crypto Shell Extensions, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1270500552|0x95c9810ee06a6302c7330b295cfe4ba5|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:12, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:12, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:12, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:12, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:12, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:12, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 60416, File modification date = 14/04/2008  00:12, File description = Remote Sessions CPL Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710249258|0xb30637e52cb169f89335119978bdbd3e|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.7.0.18066, File size = 90112, File modification date = 09/05/2008  10:53, File description = Microsoft (R) Shell Extension for Windows Script Host, Product Name = Microsoft (R) Windows Script Host, Product version = 5.7.0.18066, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-1978924968|0x3a6d465f379e5c815f4ad565391e654c|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1132.0 (xpsp.080413-0852), File size = 487424, File modification date = 14/04/2008  00:12, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1132.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |917279009|0xdc095db6d468cb5b653e05f865487e57|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:12, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:12, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:12, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 213528, File modification date = 16/10/2008  19:12, File description = Automatic Updates Control Panel, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-284053334|0x55e6c9bc8aa0481fc2fcfcfe199ea0cd|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "c:\windows\system32\twext.dll" File version = 6.00.3800.5512 (xpsp.080413-2105), File size = 57856, File modification date = 14/04/2008  00:12, File description = Previous Versions property page, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1375188643|0x4763ce0b8cf4ca355db2fe6c74675db8|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "c:\windows\system32\twext.dll" File version = 6.00.3800.5512 (xpsp.080413-2105), File size = 57856, File modification date = 14/04/2008  00:12, File description = Previous Versions property page, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1375188643|0x4763ce0b8cf4ca355db2fe6c74675db8|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:12, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {07798131-AF23-11d1-9111-00A0C98BA67D}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7376D660-C583-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 54784, File modification date = 14/04/2008  00:12, File description = Send Mail, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |628653444|0x94b26802af755849ab0c4359235e881d|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 54784, File modification date = 14/04/2008  00:12, File description = Send Mail, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |628653444|0x94b26802af755849ab0c4359235e881d|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "c:\windows\system32\occache.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 102912, File modification date = 20/12/2008  23:15, File description = Object Control Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2011347240|0xa716dccf51af07439849df33569929d7|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 233472, File modification date = 20/12/2008  23:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2140264489|0x52efdab456ee729d039a683afd11106c|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:12, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:12, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:12, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:12, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:12, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:12, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:12, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:12, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:12, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:12, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:12, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:12, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "c:\windows\system32\extmgr.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 133120, File modification date = 20/12/2008  23:15, File description = Extensions Manager, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1265708411|0xb7bdc38d7b9f912ce9324984b64e9899|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 248832, File modification date = 14/04/2008  00:11, File description = Microsoft Internet Explorer FTP Folder Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-886537954|0x1b91d3900a53801716075c5eec568c4b|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:11, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:11, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:11, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:11, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:11, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 113152, File modification date = 14/04/2008  00:11, File description = Directory Service Common UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-304627909|0x72b4aaefc66764893faeeee5614ec30e|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 113152, File modification date = 14/04/2008  00:11, File description = Directory Service Common UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-304627909|0x72b4aaefc66764893faeeee5614ec30e|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:12, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:12, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:12, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:11, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:11, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:11, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3427, File size = 24064, File modification date = 14/04/2008  00:11, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3427, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1178968343|0x909db998f06e949c59558f1d420a169b|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 28672, File modification date = 14/04/2008  00:11, File description = Distributed File System shell extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1336285211|0xe305d407e888f5859ab9b3df3a342838|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 176128, File modification date = 14/04/2008  00:12, File description = Photo Printing Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1173339654|0x5a0bcbf2a6a14396e800ff0a57ae5968|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.2.3790.4136 (srv03_sp2_qfe.070821-1204), File size = 61440, File modification date = 14/04/2008  00:11, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.4136, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |5781428|0x1c22a3866112ed41e1f3684dae9ad5d2|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 84480, File modification date = 14/04/2008  00:11, File description = Cabinet File Viewer Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1395650835|0xc9b409695490c5f427218595fff9b44f|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 32768, File modification date = 14/04/2008  00:12, File description = Find People, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1597675581|0x3bf5d6639c726b4baa9dbb3fa130b2c3|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 19/10/2006  03:47, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 19/10/2006  03:47, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 19/10/2006  03:47, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {1D2680C9-0E2A-469d-B787-065558BC7D43}
      "c:\windows\system32\mscoree.dll" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 282112, File modification date = 25/07/2008  16:16, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1043243239|0xc99248b969a799b771f484cd68bcb96e|
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 96760, File modification date = 25/07/2008  16:16, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1489495653|0xb6c9a03e1ba3e74e33633369b35ae526|
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.3053 (netfxsp.050727-3000), File size = 96760, File modification date = 25/07/2008  16:16, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.3053, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1489495653|0xb6c9a03e1ba3e74e33633369b35ae526|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {59850401-6664-101B-B21C-00AA004BA90B}
      "c:\program files\microsoft office\office\1033\unbind.dll" File version = 9.0.2601, File size = 36864, File modification date = 01/02/1999  16:18, File description = Microsoft Office Binder Document Unbinder, Product Name = Microsoft Office Binder Document Unbinder, Product version = 9.0.2601, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1997) |936825476|0x4954cc6d05b35f624d172737eb12f0ec|
    {0006F045-0000-0000-C000-000000000046}
      "c:\program files\microsoft office\office\olkfstub.dll" File version = 9.0.6418, File size = 53298, File modification date = 18/04/2002  21:54, File description = Microsoft Outlook Shell Hook for Start/Find, Product Name = Microsoft Outlook, Product version = 9.0.6418, Company name = Microsoft Corporation (Copyright Microsoft Corporation 1983-1999.  All rights reserved.) |571790052|0x893bd51db6e5ad3c3b84e89624a8fecb|
    {5E44E225-A408-11CF-B581-008029601108}
      "c:\program files\roxio\easy cd creator 5\directcd\shellex.dll" File version = 5.3.4.21, File size = 180224, File modification date = 17/12/2002  17:27, File description = DirectCD Shell Extention DLL, Product Name = DirectCD, Product version = 5.3.4.21, Company name = Roxio (Copyright (c) 2001,2002, Roxio, Inc.) |-821999925|0x8b0cf48ed107595ff1aa26c44f3a6068|
    {35786D3C-B075-49b9-88DD-029876E11C01}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 19/10/2006  03:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 19/10/2006  03:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {07C45BB1-4A8C-4642-A1F5-237E7215FF66}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {1C1EDB47-CE22-4bbb-B608-77B48F83C823}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {205D7A97-F16D-4691-86EF-F3075DCCA57D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {3028902F-6374-48b2-8DC6-9725E775B926}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {43886CD5-6529-41c4-A707-7B3C92C05E68}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {44C76ECD-F7FA-411c-9929-1B77BA77F524}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {4B78D326-D922-44f9-AF2A-07805C2A3560}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {6038EF75-ABFC-4e59-AB6F-12D397F6568D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {6CF48EF8-44CD-45d2-8832-A16EA016311B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {73CFD649-CD48-4fd8-A272-2070EA56526B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {9D958C62-3954-4b44-8FAB-C4670C1DB4C2}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {B31C5FAE-961F-415b-BAF0-E697A5178B94}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {BC476F4C-D9D7-4100-8D4E-E043F6DEC409}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {E6EE9AAC-F76B-4947-8260-A9F136138E11}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {F2CF5485-4E02-4f68-819C-B92DE9277049}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {FDE7673D-2E19-4145-8376-BBD58C4BC7BA}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16791 (vista_gdr.081217-1620), File size = 6066688, File modification date = 20/12/2008  23:15, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16791, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |920611953|0x1c736f3980c7328077b65c3bb33e80a3|
    {8e9d6600-f84a-11ce-8daa-00aa004a5691}
      "c:\windows\system32\nwprovau.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 142336, File modification date = 14/04/2008  00:12, File description = Client Service for NetWare Provider and Authentication Package DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |227468934|0x06e587f41466569f32beaac7260e8aec|
    {e3f2bac0-099f-11cf-8daa-00aa004a5691}
      "c:\windows\system32\nwprovau.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 142336, File modification date = 14/04/2008  00:12, File description = Client Service for NetWare Provider and Authentication Package DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |227468934|0x06e587f41466569f32beaac7260e8aec|
    {52c68510-09a0-11cf-8daa-00aa004a5691}
      "c:\windows\system32\nwprovau.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 142336, File modification date = 14/04/2008  00:12, File description = Client Service for NetWare Provider and Authentication Package DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |227468934|0x06e587f41466569f32beaac7260e8aec|
    {640167b4-59b0-47a6-b335-a6b3c0695aea}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 276992, File modification date = 19/10/2006  03:47, File description = Portable Media Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation. All rights reserved.) |-656474916|0x4c48f1b30a82583caee0da02dd7259ee|
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}
      "c:\program files\winrar\rarext.dll" File version = 3.80, File size = 132608, File modification date = 14/08/2008  04:55, File description = WinRAR shell extension, Product Name = WinRAR, Product version = (null), Company name = Alexander Roshal (Copyright  Alexander Roshal 1993-2008) |-1332401752|0xf53997bcff2633bc11bfee4d927b7797|
    {5464D816-CF16-4784-B9F3-75C0DB52B499}
      "c:\program files\yahoo!\common\ymmapi.dll" File version = 2005, 1, 1, 12, File size = 285464, File modification date = 28/06/2007  21:41, File description = Yahoo! Mail, Product Name = Yahoo! Mail, Product version = 1, 0, 0, 0, Company name = Yahoo! Inc. (Copyright  2001-2007 Yahoo! Inc.) |-2137713201|0x42d08a04bea63d24545c543583bc5d7a|
    {45670FA8-ED97-4F44-BC93-305082590BFB}
      "C:\WINDOWS\system32\xpsshhdr.dll" File version = 6.0.6001.22212 (vistasp1_ldr.080626-1538), File size = 575488, File modification date = 06/07/2008  12:06, File description = Package Document Shell Extension Handler, Product Name = Microsoft Windows Operating System, Product version = 6.0.6001.22212, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1607228386|0x81c4b0077427391d582fbb1b6b9578cb|
    {44121072-A222-48f2-A58A-6D9AD51EBBE9}
      "C:\WINDOWS\system32\xpsshhdr.dll" File version = 6.0.6001.22212 (vistasp1_ldr.080626-1538), File size = 575488, File modification date = 06/07/2008  12:06, File description = Package Document Shell Extension Handler, Product Name = Microsoft Windows Operating System, Product version = 6.0.6001.22212, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1607228386|0x81c4b0077427391d582fbb1b6b9578cb|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 04/08/2004  12:00, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857171960|0x43c797488aed00ae5170b0531f8fc6e9|
  *\SOFTWARE\Microsoft\Internet Explorer\Extensions\*
    CLSID={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    ClsidExtension={53707962-6F74-2D53-2644-206D7942484F} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}>
      "c:\program files\spybot - search & destroy\sdhelper.dll" File version = 1, 6, 2, 14, File size = 1879896, File modification date = 26/01/2009  20:31, File description = SBSD IE Protection, Product Name = Spybot - Search & Destroy, Product version = 1, 6, 0, 0, Company name = Safer Networking Limited ( 2000-2008 Safer Networking Limited. Alle Rechte vorbehalten.) |1537359879|0x022c2f6dccdfa0ad73024d254e62afac|
    CLSID={1FBA04EE-3024-11d2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    Exec=%windir%\Network Diagnostic\xpnetdiag.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "C:\WINDOWS\network diagnostic\xpnetdiag.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 558080, File modification date = 13/04/2008  18:53, File description = Network Diagnostic for Windows XP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |292034847|0xaac1d4ee39df138c5d30ac5883e3b59f|
    CLSID={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:12, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    Exec=C:\Program Files\Messenger\msmsgs.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:12, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
    HotIcon=C:\Program Files\Messenger\msmsgs.exe,302 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:12, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
    Icon=C:\Program Files\Messenger\msmsgs.exe,301 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:12, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
  HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\*\Contains\Files
    C:\Program Files\Yahoo!\Common\yinsthelper.dll
      "c:\program files\yahoo!\common\yinsthelper.dll" File version = 2007, 11, 28, 1, File size = 211744, File modification date = 28/11/2007  21:55, File description = YInstHelper Module, Product Name = YInstHelper Module, Product version = 1, 0, 0, 1, Company name = Yahoo! Inc. (Copyright  2001-2007 Yahoo! Inc. All rights reserved.) |675501539|0x48ff0fa1cab4ad6acef9027f34090880|
    C:\WINDOWS\system32\wuweb.dll
      "c:\windows\system32\wuweb.dll" File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 202776, File modification date = 16/10/2008  19:13, File description = Windows Update Web Control, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-191901659|0x1865594afe88c27a127ff4cf492734b0|
    C:\WINDOWS\Downloaded Program Files\livetv.ocx
      "c:\windows\downloaded program files\livetv.ocx" File version = 1, 0, 0, 90, File size = 294728, File modification date = 14/11/2008  03:22, File description = KooPlayer ActiveX Control Module, Product Name = KooPlayer ActiveX Control Module, Product version = 1, 0, 0, 1, Company name = Koos (Copyright (C) 2008) |1793353857|0x28f11b6cb3cc0bad6d2dfbb6554c3b59|
    C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
      "c:\windows\downloaded program files\fp_ax_cab_installer.exe" File version = 1.0.20, File size = 1527056, File modification date = 24/03/2008  23:33, File description = Adobe Flash Player ActiveX Installer, Product Name = Adobe Flash Player ActiveX, Product version = 9.0.124.0, Company name = Adobe Systems Incorporated (Copyright  1996-2007 Adobe Systems Incorporated and its licensors. All Rights Reserved.) |1175938765|0xdd3975246d8928c04549b31b6b49434f|
    C:\WINDOWS\Downloaded Program Files\ieatgpc.dll
      "c:\windows\downloaded program files\ieatgpc.dll" File version = 2, 1, 0, 0, File size = 98704, File modification date = 04/01/2008  03:31, File description = Download Manager, Product Name = WebEx Download Module, Product version = 2, 6, 0, 12, Company name = WebEx Communications, Inc (Copyright 1997-2006 WebEx Communications, Inc.) |66912682|0x885f69743dd3477ee76e3aa1b17a251d|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:11, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
TASK MANAGER
   "c:\program files\mcafee\mqc\qcconsol.exe" File version = 8,1,106,0, File size = 222496, File modification date = 04/12/2007  18:32, File description = QuickClean Console Application, Product Name = McAfee QuickClean, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-406295898|0xa83c216b5bd558f63a1959a711cee5a8|
   "c:\windows\system32\defrag.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:12, File description = Disk Defragmenter Module, Product Name = Windows Disk Defragmenter, Product version = 5.1.2600.5512, Company name = Microsoft Corp. and Executive Software International, Inc. (2001 Microsoft Corp. and Executive Software Int'l, Inc.) |-971830991|0x29d41e4ed94b2048f96583d18bc1950f|
   "c:\program files\mcafee\mqc\qcconsol.exe" File version = 8,1,106,0, File size = 222496, File modification date = 04/12/2007  18:32, File description = QuickClean Console Application, Product Name = McAfee QuickClean, Product version = 8,1,0,0, Company name = McAfee, Inc. (Copyright  2006 McAfee, Inc.) |-406295898|0xa83c216b5bd558f63a1959a711cee5a8|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:12, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:12, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\nwprovau.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 142336, File modification date = 14/04/2008  00:12, File description = Client Service for NetWare Provider and Authentication Package DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |227468934|0x06e587f41466569f32beaac7260e8aec|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\program files\bonjour\mdnsnsp.dll" File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:12, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\program files\bonjour\mdnsnsp.dll" File version = 1,0,5,11, File size = 147456, File modification date = 29/08/2008  13:53, File description = Bonjour Namespace Provider, Product Name = Bonjour, Product version = 1,0,5,11, Company name = Apple Inc. (Copyright (C) 2003-2008 Apple Inc.) |-1418290629|0x0e3e56064e162ee9cc48698355098301|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      127.0.0.1       localhost
STARTUP MENU
  C:\Documents and Settings\All Users\Start Menu\Programs\Startup
      "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk" File version = (null), File size = 1757, File modification date = 30/03/2007  10:17, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-291172097|0x85b5fcf78602baf4b38ee9c54da89b1e|
        "c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe" File version = 7.0.5.2005092300, File size = 29696, File modification date = 24/09/2005  03:05, File description = Adobe Acrobat SpeedLauncher, Product Name = Adobe Acrobat, Product version = 7.0.5.2005092300, Company name = Adobe Systems Incorporated (Copyright 1984-2005 Adobe Systems Incorporated and its licensors. All rights reserved.) |1689295118|0x43362b96870ce8649f4f2ec893da93f0|
    "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 02/05/2007  15:10, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
    "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk" File version = (null), File size = 1725, File modification date = 02/05/2006  18:38, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1123076498|0x6973cf378b248a3ca7da9a7e30c206ae|
      "c:\program files\microsoft office\office\osa9.exe" File version = 9.0.3720, File size = 65588, File modification date = 21/01/2000  08:15, File description = Microsoft Office 2000 component, Product Name = Microsoft Office 2000, Product version = 9.0.3720, Company name = Microsoft Corporation (Copyright Microsoft Corporation 1994-1999.  All rights reserved.) |-1233313667|0x0d20ea0f847d6d93e84d7bf875dd6e4f|
    "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Symantec Fax Starter Edition Port.lnk" File version = (null), File size = 928, File modification date = 02/05/2006  18:38, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1614019016|0xe6b83551fac0f7abd26db4183e9961dc|
      "c:\program files\microsoft office\office\1033\olfsnt40.exe" File version = 9.0.98.0105, File size = 45568, File modification date = 23/12/1998  13:51, File description = Symantec Fax Starter Edition Port Launcher, Product Name = Symantec Fax Starter Edition Printer Driver, Product version = 9.0.98.0105, Company name = Microsoft Corporation (Copyright (C) Symantec Corp. 1990-1998) |1879030107|0x60fdd0fcf620deb6ac1f5fbedb659489|
    "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Wireless Configuration Utility HW.32.lnk" File version = (null), File size = 2657, File modification date = 11/03/2009  13:04, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1959182962|0x0485694d4d2a044ed054f522144e19d2|
  C:\Documents and Settings\****\Start Menu\Programs\Startup
      "C:\Documents and Settings\****\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 02/05/2007  15:10, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
