GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Intel(R) Pentium(R) 4 CPU 2.66GHz 2663 MHz

Processors number:
		1

BIOS:
		A M I  - 6000524 BIOS Date: 06/24/05

System Date:
		28/01/2009 (dd/mm/yyyy)

Total phisical memory:
		2047,240 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		2047,240 Mb

Available virtual memory:
		2003,760 Mb

Hard drives:
		SAMSUNG SP2004C

Logical disks structure:
		a:\ REMOVABLE Full size - 0 Mb, Free size - 0 Mb, File system - 
		c:\ FIXED SYSTEM Full size - 30004 Mb, Free size - 23242 Mb, File system - NTFS
		d:\ FIXED Full size - 20002 Mb, Free size - 3225 Mb, File system - NTFS
		e:\ FIXED Full size - 50006 Mb, Free size - 13126 Mb, File system - NTFS
		f:\ FIXED Full size - 90757 Mb, Free size - 8381 Mb, File system - NTFS
		g:\ CDROM Full size - 90757 Mb, Free size - 8381 Mb, File system - 
		h:\ CDROM Full size - 90757 Mb, Free size - 8381 Mb, File system - 

Video adapters:
		RADEON X1600 Series
			DRIVER - system32\DRIVERS\ati2mtag.sys ("c:\windows\system32\drivers\ati2mtag.sys") File version = 6.14.10.6614, File size = 1540608, File modification date = 03/05/2006  16:50, File description = ATI Radeon WindowsNT Miniport Driver, Product Name = ATI Radeon WindowsNT Miniport Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-328657474|0x492bd2a5f65f218d4ede5764a3bb67e9|
		RADEON X1600 Series Secondary 
			DRIVER - system32\DRIVERS\ati2mtag.sys ("c:\windows\system32\drivers\ati2mtag.sys") File version = 6.14.10.6614, File size = 1540608, File modification date = 03/05/2006  16:50, File description = ATI Radeon WindowsNT Miniport Driver, Product Name = ATI Radeon WindowsNT Miniport Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-328657474|0x492bd2a5f65f218d4ede5764a3bb67e9|

NetWork adapters:
		Bluetooth Device (Personal Area Network)
			DRIVER - system32\DRIVERS\bthpan.sys ("c:\windows\system32\drivers\bthpan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 100992, File modification date = 03/08/2004  19:58, File description = Bluetooth Personal Area Networking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273676637|0x10355270be12641b9764235da39dcf0f|
		Realtek RTL8139 Family PCI Fast Ethernet NIC
			DRIVER - system32\DRIVERS\RTL8139.SYS ("c:\windows\system32\drivers\rtl8139.sys") File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
		Terayon Cable Modem
			DRIVER - system32\DRIVERS\usb8023.sys ("c:\windows\system32\drivers\usb8023.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12672, File modification date = 18/08/2004  12:00, File description = Remote NDIS USB Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-582984044|0xaf090265ec388bab320f1ff7e7a7d5ea|

Modems:
		Nokia N95 USB Modem

Multimedia:
		Realtek AC'97 Audio
			DRIVER - system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
		   Microsoft
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
		    Microsoft
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
		   Microsoft
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
		  
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
		  DRM  
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
		   
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 172416, File modification date = 14/06/2006  08:50, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1130552819|0x8531438246ce9474e41ee1599904c0c7|
		    
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
		   Microsoft Kernel GS
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
		 DLS  
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
		   Microsoft (WINMM WDM)
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 82944, File modification date = 14/06/2006  09:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1519466349|0x0bfa8203b8148fb4e54bc212c41ce497|
		   
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 6272, File modification date = 14/06/2006  08:50, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1000408079|0x9bb1dd670cb7505a90fc4e61d4aa8227|

Printers:
		Canon MF5700 Series - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNAR0M_D80D7.DLL ("c:\windows\system32\spool\drivers\w32x86\3\cnar0m_d80d7.dll") File version = 2.01.03, File size = 516608, File modification date = 15/12/2004  08:28, File description = Canon Advanced Raster Printing System Printer Driver, Product Name = Canon Advanced Raster Printing System Printer Driver for Microsoft Windows 2000/XP, Product version = 2.01.03, Company name = CANON INC. (Copyright CANON INC. 2004 All Rights Reserved) |1059447751|0x74f866ce18dce6f91085207092798f9c|
		Microsoft Office Document Image Writer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mdigraph.dll ("c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll") File version = 11.3.1897.0, File size = 758784, File modification date = 18/06/2003  22:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |44298690|0x365d6248953729f90d8a0caeaedfcc7a|
		Canon MF5700 Series (FAX)
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNFRBM_D65CA.dll ("c:\windows\system32\spool\drivers\w32x86\3\cnfrbm_d65ca.dll") File version = 3.32, File size = 497152, File modification date = 18/08/2004  14:53, File description = Canon Raster Fax Driver, Product Name = CANON Raster Fax Driver for Microsoft Windows 2000/XP/Server 2003, Product version = 3.32, Company name = CANON INC. (Copyright (C) 2004 CANON INC. All Rights Reserved.) |1912354322|0x5fe81218de11ab3906bd82ce96f53396|

Removable devices:
		  
			DRIVER - system32\DRIVERS\flpydisk.sys ("c:\windows\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
		HL-DT-ST DVDRAM GSA-4167B
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Professional Edition, 5.1.2600 Service Pack 2

Environment variables:
		=::=::\
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\Alexander\Application Data
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=HOME
		ComSpec=C:\WINDOWS\system32\cmd.exe
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\Alexander
		LOGONSERVER=\\HOME
		NUMBER_OF_PROCESSORS=1
		OS=Windows_NT
		Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\PC Connectivity Solution
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
		PROCESSOR_LEVEL=15
		PROCESSOR_REVISION=0401
		ProgramFiles=C:\Program Files
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\Temp
		TMP=C:\Temp
		USERDOMAIN=HOME
		USERNAME=Alexander
		USERPROFILE=C:\Documents and Settings\Alexander
		windir=C:\WINDOWS

Installed network protocols:
---------clients---------
		-
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		   Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
--------protocol---------
		 -  Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
		    
			DRIVER - system32\DRIVERS\rspndr.sys ("c:\windows\system32\drivers\rspndr.sys") File version = 5.1.2600.3029 (xpsp_sp2_qfe.061107-2325), File size = 62336, File modification date = 04/12/2006  09:03, File description = Link-Layer Topology Responder Driver for NDIS 6, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3029, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1771733776|0x0e11b35e972796042044bc27ce13b065|
		NDIS- WAN  
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
		  TCP/IP ( SMB)
		  (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp.060420-0256), File size = 360576, File modification date = 14/10/2006  20:38, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2034869751|0xbb4d3a8e6f7eb1d370bc4ad27ab23368|
		  -
		   2
		  WINS (TCP/IP)
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
		NDIS- /  
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 14592, File modification date = 30/08/2007  07:31, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |840521658|0x5146c3d286e66c72328f6ce6e4d983a8|
--------services---------
		   
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
		  
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
		  
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
		 NetBIOS
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
		    
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		 
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		Kaspersky Anti-Virus NDIS Filter
			DRIVER - system32\DRIVERS\klim5.sys ("c:\windows\system32\drivers\klim5.sys") File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  16:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
		       Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
-----------by type----------
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]
		RSVP UDP Service Provider
		RSVP TCP Service Provider
		MSAFD RfComm [Bluetooth]
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{4E3C9451-4989-4101-9D7B-D4CF9E880B58}] SEQPACKET 4
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{4E3C9451-4989-4101-9D7B-D4CF9E880B58}] DATAGRAM 4
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{BCC49F5E-3BA1-4ACB-87A9-D7BB098ADF10}] SEQPACKET 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{BCC49F5E-3BA1-4ACB-87A9-D7BB098ADF10}] DATAGRAM 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{B3398370-F00C-4E66-A12F-86C74A529B1E}] SEQPACKET 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{B3398370-F00C-4E66-A12F-86C74A529B1E}] DATAGRAM 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{FE4BC3AF-51D2-4382-ADD7-80E589DC5322}] SEQPACKET 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{FE4BC3AF-51D2-4382-ADD7-80E589DC5322}] DATAGRAM 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BCFB6DD-484C-40DB-BE34-799C5B2B5775}] SEQPACKET 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BCFB6DD-484C-40DB-BE34-799C5B2B5775}] DATAGRAM 2

Installed applications/hotfixes:
		  Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0) 08/22/2008 7.0.0.0 (Nokia)
			DEINSTALLATION: C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf
		  Windows - Nokia Modem  (10/27/2008 7.01.0.1) 10/27/2008 7.01.0.1 (Nokia)
			DEINSTALLATION: C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_247189AEBF39EB69A7C75429610DFED2F2EDC1B6\nokbtmdm.inf
		  Windows - Nokia Modem  (10/27/2008 3.9) 10/27/2008 3.9 (Nokia)
			DEINSTALLATION: C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_79486EC6AA0D1732FB17E5167077C07ECAE1B870\nokia_bluetooth.inf
		Adobe Photoshop CS3 10.0 (Adobe Systems Incorporated)
			DEINSTALLATION: C:\Program Files\Common Files\Adobe\Installers\0d5fe1f44895aadff2baacf24fe1402\Setup.exe
		ArmA Uninstall
			DEINSTALLATION: E:\Armed Assault\ArmA\UnInstall.exe
		ATI Display Driver 8.252-060503a-032464C-ATI
			DEINSTALLATION: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
		DAEMON Tools Toolbar 1.0.0.2 (DT Soft Ltd)
			DEINSTALLATION: C:\Program Files\DAEMON Tools Toolbar\uninst.exe
		docXConverter 2.0.1 2.0.1, installation data=20081204 (Panergy LTD.)
			DEINSTALLATION: "C:\Program Files\docXConverter\unins000.exe"
		Enemy Engaged 2 1.0, installation data=20090124 (G2 Games)
			DEINSTALLATION: "E:\Enemy Engaged 2\unins000.exe"
		Fraps (remove only)
			DEINSTALLATION: "C:\Program Files\Fraps\uninstall.exe"
		GIF Movie Gear 4.1.2 (gamani productions)
			DEINSTALLATION: "C:\Program Files\GIF Movie Gear\unins000.exe"
		GOM Player
			DEINSTALLATION: "C:\Program Files\GRETECH\GomPlayer\Uninstall.exe"
		! (Russian) 1.00.0000, installation data=20081021 ()
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{7423A4AE-B91A-4E5D-809A-51C4CA1C94AA} 
		Kaspersky Internet Security 2009 8.0.0.454 ( )
			DEINSTALLATION: MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
		   Windows XP - KB319740 5, installation data=20060320 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB873339 20041117.092422, installation data=20041213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB885836 20041028.160538, installation data=20041213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB886677 20041015.135028, installation data=20041119 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB887472 20041014.162835, installation data=20050207 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB888302 20041207.111356, installation data=20050207 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB889016 20041112.120732, installation data=20050405 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB889673 20041116.085848, installation data=20060320 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB890831 20041206.145031, installation data=20050112 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB890859 1, installation data=20050411 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB891781 20050110.170221, installation data=20050207 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB893756) 1, installation data=20050808 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Installer 3.1 (KB893803) 2, installation data=20050504 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB894871) 1, installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB896256) 4, installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB896358) 1, installation data=20050613 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB896423) 1, installation data=20050808 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB896428) 1, installation data=20050613 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP - KB896626 2, installation data=20050513 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB897663) 1, installation data=20050831 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB898900) 2, installation data=20051130 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB899271) 4, installation data=20051222 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB899587) 1, installation data=20050808 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB899591) 1, installation data=20050808 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB900485) 2, installation data=20060425 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB900725) 1, installation data=20051010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB901017) 1, installation data=20051010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB901214) 1, installation data=20050711 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB902400) 1, installation data=20051010 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB903234) 1, installation data=20050728 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB904412) 2, installation data=20051007 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB904706) 2, installation data=20051213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB904942) 2, installation data=20060324 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB905414) 1, installation data=20051010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB905749) 1, installation data=20051010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB905915) 1, installation data=20051213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB906569) 2, installation data=20051005 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB908519) 1, installation data=20060109 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB908521) 1, installation data=20051213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB908531) 2, installation data=20060425 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB910437) 1, installation data=20051213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB911280) 2, installation data=20060627 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB911562) 1, installation data=20060411 (Microsoft Corporation)
			DEINSTALLATION: 
		    Windows Media - (KB911564), installation data=20060214 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB911927) 1, installation data=20060213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB912817) 2, installation data=20060522 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB913296) 1, installation data=20060202 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB913538) 1, installation data=20060221 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB913580) 1, installation data=20060509 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB914388) 1, installation data=20060711 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB914389) 1, installation data=20060613 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB915865) 11, installation data=20060926 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB916595) 1, installation data=20060606 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB916846) 1, installation data=20060815 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB917021) 3, installation data=20061017 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB917537) 1, installation data=20060711 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB917730) 1, installation data=20060530 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB917953) 1, installation data=20060613 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB918005) 4, installation data=20061121 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB918118) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB918439) 1, installation data=20060613 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB919007) 1, installation data=20060912 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB920213) 1, installation data=20061114 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB920670) 1, installation data=20060808 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB920683) 1, installation data=20060808 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB920685) 1, installation data=20060912 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB920872) 1, installation data=20060817 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB921503) 1, installation data=20070814 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB922120) 5, installation data=20061121 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB922582) 1, installation data=20060912 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB922819) 1, installation data=20061010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB923191) 1, installation data=20061010 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB923414) 1, installation data=20061010 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB923845) 1, installation data=20070626 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB923980) 1, installation data=20061114 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB924270) 1, installation data=20061114 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB924667) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB924941) 2, installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: 
		    Windows Media 6.4 - (KB925398), installation data=20070710 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB925720) 1, installation data=20061121 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB925876) 1, installation data=20070130 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB925902) 1, installation data=20070403 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows XP (KB926239) 2, installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB926247) 1, installation data=20061212 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB926255) 1, installation data=20061212 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB926436) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB927779) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB927802) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB927891) 3, installation data=20070507 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB928255) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB928595-v5) 5, installation data=20070724 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB928788), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB928843) 1, installation data=20070213 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB929123) 1, installation data=20070612 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB929399), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB930178) 1, installation data=20070410 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB930916) 1, installation data=20070508 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB931261) 1, installation data=20070410 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB931784) 1, installation data=20070410 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB932168) 1, installation data=20070410 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB932390), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB932590) 1, installation data=20070308 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB933360) 1, installation data=20070801 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB933547), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB933811) 1, installation data=20070626 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB935448) 1, installation data=20070403 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB935551), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Format 11 SDK (KB935552), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB935839) 1, installation data=20070612 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB935840) 1, installation data=20070612 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB935843) 1, installation data=20070418 (Microsoft Corporation)
			DEINSTALLATION: 
		Hotfix for Windows Media Player 11 (KB935957), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB936021) 1, installation data=20070814 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB936357) 1, installation data=20070612 (Microsoft Corporation)
			DEINSTALLATION: 
		    Windows Media 11 - (KB936782), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows Internet Explorer 7 (KB937143) 1, installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB938127) 1, installation data=20070814 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows Internet Explorer 7 (KB938127) 1, installation data=20070815 (Microsoft Corporation)
			DEINSTALLATION: 
		  Windows XP (KB938828) 1, installation data=20070724 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB938829) 1, installation data=20070814 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB939373) 1, installation data=20070710 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows Media 11 - (KB939683), installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		Malwarebytes' Anti-Malware, installation data=20090127 (Malwarebytes Corporation)
			DEINSTALLATION: "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
		Microsoft .NET Framework 2.0 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
		Microsoft Compression Client Pack 1.0 for Windows XP 1, installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		Nero 6 Enterprise Edition
			DEINSTALLATION: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
		Nokia PC Suite 7.1.18.0 (Nokia)
			DEINSTALLATION: C:\Documents and Settings\All Users\Application Data\Installations\{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}\Nokia_PC_Suite_7_1_18_0_rus_web.exe
		OpenAL
			DEINSTALLATION: "C:\Program Files\OpenAL\OpenALwEAX.exe" /U
		QIP 2005 8080 8080, installation data=20090121
			DEINSTALLATION: "C:\Program Files\QIP\unins000.exe"
		QIP 2005 Uninstall
			DEINSTALLATION: "C:\Program Files\QIP\unqip.exe"
		QiPSpeller
			DEINSTALLATION: "C:\Program Files\QIP\QiPSpeller\uninstall.exe"
		Adobe Flash Player 9 ActiveX 9.0.47.0 (Adobe Systems)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\FlashUtil9d.exe -uninstallDelete
		Microsoft Kernel-Mode Driver Framework Feature Pack 1.7, installation data=20081229 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
		Windows Genuine Advantage Validation Tool (KB892130) 1.7.0036.0, installation data=20070414 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Media Format 11 runtime
			DEINSTALLATION: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
		 Windows Media 11
			DEINSTALLATION: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
		Windows Media Format 11 runtime, installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Media Player 11, installation data=20081019 (Microsoft Corporation)
			DEINSTALLATION: 
		Worms -    1.0
			DEINSTALLATION: "E:\Worms World Party\unins000.exe"
		Microsoft User-Mode Driver Framework Feature Pack 1.5, installation data=20081229 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
		 Canon MF
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01B93B3A-283F-411B-A648-69CABCACC986}\Setup.exe" -l0x19 -Uninstall
		Adobe Help Viewer CS3 (Russian) 1, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
		Adobe Bridge Start Meeting (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
		Canon MF Toolbox 4.7.0.0.mf04
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{132CA5D9-C745-4B0B-A3B2-8C7A6EC3EE7E}\Setup.exe" -l0x19 -Uninstall
		Nokia Connectivity Cable Driver (English) 7.1.8.0, installation data=20081229 (Nokia)
			DEINSTALLATION: MsiExec.exe /X{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}
		Adobe WinSoft Linguistics Plugin (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
		AutoUpdate 1.1
		MSVC80_x86 (English) 1.0.1.0, installation data=20081229 (Nokia)
			DEINSTALLATION: MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
		PDF Settings (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}
		Adobe Stock Photos CS3 (Russian) 1.5, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
		Adobe Setup (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{30981FCD-4150-4AB4-BAC5-75C9E914347D}
		WebFldrs XP (Russian) 9.50.7523, installation data=20081019 (Microsoft Corporation)
		Adobe Linguistics CS3 (Russian) 3.0.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
		Nokia PC Suite (Russian) 7.1.18.0, installation data=20081229 (Nokia)
			DEINSTALLATION: MsiExec.exe /I{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}
		Enemy Engaged 2 Speech (English) 1.00.0000, installation data=20090124 (Your Company Name)
			DEINSTALLATION: MsiExec.exe /I{5CB6A112-DA36-486B-9B1C-6341CB95DE37}
		Nokia Software Launcher (Russian) 1.1.223, installation data=20081020 (Nokia)
			DEINSTALLATION: MsiExec.exe /I{5CCABD37-479D-4304-B1A5-67952C25F8F2}
		Adobe Color NA Extra Settings (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}
		Adobe Fonts All (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
		Adobe Asset Services CS3 (Russian) 3, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
		Microsoft .NET Framework 2.0 (Russian) 2.0.50727, installation data=20081030 (Microsoft Corporation)
		Microsoft Visual C++ 2005 Redistributable (Russian) 8.0.56336, installation data=20081229 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
		! (Russian) 1.00.0000, installation data=20081021 ()
		"Alien Shooter 2.  " ( ) 1.0, installation data=20090124 (1C)
			DEINSTALLATION: "E:\Program Files\1C\Alien Shooter 2.  \Alien Shooter 2\unins000.exe" /SILENT
		DivX Codec 6.8.5 (DivX, Inc.)
			DEINSTALLATION: C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
		Adobe XMP Panels CS3 (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
		Kaspersky Internet Security 2009 (Russian) 8.0.0.454, installation data=20081030 ( )
			DEINSTALLATION: MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
		Adobe Device Central CS3 (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
		Adobe Type Support (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
		Microsoft Office -    2003 (Russian) 11.0.5614.0, installation data=20081020 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
		Adobe Anchor Service CS3 (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
		Microsoft Games for Windows - LIVE Redistributable (English) 1.2.0241, installation data=20081107 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
		Adobe Bridge CS3 (Russian) 2, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
		Adobe CMaps (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
		Adobe Color - Photoshop Specific (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
		MSXML 6.0 Parser (English) 6.10.1129.0, installation data=20081229 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}
		Adobe Reader 9 - Russian (Russian) 9.0.0, installation data=20090124 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A90000000001}
		Adobe Camera Raw 4.0 (Russian) 4.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
		Microsoft XML Parser (Russian) 8.20.8730.4, installation data=20081216 (Microsoft Corporation)
		Adobe Default Language CS3 (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
		Adobe Color EU Recommended Settings (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}
		Adobe ExtendScript Toolkit 2 (Russian) 2.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
		Microsoft .NET Framework 1.1 (Russian) 1.1.4322, installation data=20081030 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Adobe Version Cue CS3 Client (Russian) 3, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
		Adobe PDF Library Files (Russian) 8.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
		PC Connectivity Solution (English) 8.47.6.0, installation data=20081229 (Nokia)
			DEINSTALLATION: MsiExec.exe /I{D848D140-41C3-4A53-86D8-E866A100B4CD}
		Adobe Color JA Extra Settings (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{D92B72E2-C854-4738-8ED6-4C3661CC17AE}
		Nokia Flashing Cable Driver (English) 8.47.0.0, installation data=20081229 (Nokia)
			DEINSTALLATION: MsiExec.exe /X{D99C322D-C21B-40C7-AE71-EE51AA096B6E}
		Adobe Color Common Settings (Russian) 1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
		Adobe Update Manager CS3 (Russian) 5.1.0, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
		World in Conflict (English) 1.0.0.0, installation data=20090124 (Massive Entertainment AB)
			DEINSTALLATION: C:\Program Files\InstallShield Installation Information\{F11ADC64-C89E-47F4-A0B3-3665FF859397}\setup.exe -runfromtemp -l0x0009 -removeonly
		Realtek AC'97 Audio
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
		Adobe Photoshop CS3 (Russian) 10, installation data=20081020 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{FD0399AC-A38B-4D4B-8164-D7B73AC24030}
		    1.1, installation data=20081030 (Exceed Entertainment)
			DEINSTALLATION: "E:\   \unins000.exe"

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
	system32\DRIVERS\asyncmac.sys - stopped (demand) ("c:\windows\system32\drivers\asyncmac.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
	\??\C:\Documents and Settings\Alexander\ \BiTDefender 10\App\bdfdll.sys - stopped (demand) ("\\?\c:\documents and settings\alexander\ \bitdefender 10\app\bdfdll.sys") File version = (null), File size = 8704, File modification date = 04/12/2006  12:51, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |244587866|0x4b8c4b37a298305af83676679329522b|
	system32\DRIVERS\BthEnum.sys - stopped (demand) ("c:\windows\system32\drivers\bthenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 03/08/2004  20:10, File description = Bluetooth Bus Extender, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |689063939|0xd24b8d1784c68a25060fffbe8ed34b76|
	system32\DRIVERS\bthmodem.sys - stopped (demand) ("c:\windows\system32\drivers\bthmodem.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38016, File modification date = 03/08/2004  20:10, File description = Bluetooth Communications Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-119841680|0x9df0adf74ce1d6371ed60cf92eb1d9a6|
	system32\DRIVERS\bthpan.sys - stopped (demand) ("c:\windows\system32\drivers\bthpan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 100992, File modification date = 03/08/2004  19:58, File description = Bluetooth Personal Area Networking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273676637|0x10355270be12641b9764235da39dcf0f|
	System32\Drivers\BTHport.sys - stopped (demand) ("c:\windows\system32\drivers\bthport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 274688, File modification date = 17/08/2004  12:50, File description =   Bluetooth, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-1518874965|0xd818c59f9df3709f97384c0b6754f8bb|
	System32\Drivers\BTHUSB.sys - stopped (demand) ("c:\windows\system32\drivers\bthusb.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 03/08/2004  20:10, File description = Bluetooth Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1550493412|0xf06d4cb9918b462a84d9ac00027efc30|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
	System32\DRIVERS\gmer.sys - stopped (demand) ("c:\windows\system32\drivers\gmer.sys") File version = 1, 0, 14, 4401, File size = 85969, File modification date = 27/01/2009  13:11, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
	system32\DRIVERS\hidusb.sys - stopped (demand) ("c:\windows\system32\drivers\hidusb.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
	system32\DRIVERS\Ip6Fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
	system32\DRIVERS\ipfltdrv.sys - stopped (demand) ("c:\windows\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
	system32\drivers\ccdcmb.sys - stopped (demand) ("c:\windows\system32\drivers\ccdcmb.sys") File version = 7.1.18.28, File size = 17664, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |-318008148|0x9a908a9bb857c2cceb2907eb9dcaeb8b|
	system32\drivers\ccdcmbo.sys - stopped (demand) ("c:\windows\system32\drivers\ccdcmbo.sys") File version = 7.1.18.28, File size = 22016, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |92828695|0x68ec3ee2348e475ea62c66e6aafcfc9b|
	system32\drivers\nmwcdnsu.sys - stopped (demand) ("c:\windows\system32\drivers\nmwcdnsu.sys") File version = 6.85.6.18, File size = 138112, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |252079154|0xbe7fd9ca07e7d39f77c78ba5756930d9|
	system32\drivers\nmwcdnsuc.sys - stopped (demand) ("c:\windows\system32\drivers\nmwcdnsuc.sys") File version = 6.85.6.18, File size = 8320, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |-1208730092|0x94651f5808d3328d28ef967a9e853b8f|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\pccsmcfd.sys - stopped (demand) ("c:\windows\system32\drivers\pccsmcfd.sys") File version = 7.0.0.0, File size = 18816, File modification date = 26/08/2008  07:26, File description = PCCS Mode Change Filter Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2006,2007,2008. Nokia. All rights reserved.) |-35912472|0xfd2041e9ba03db7764b2248f02475079|
	system32\DRIVERS\rfcomm.sys - stopped (demand) ("c:\windows\system32\drivers\rfcomm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59648, File modification date = 03/08/2004  20:10, File description = Bluetooth RFCOMM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-51295389|0x99c4b74981a1413f142a3903130088cb|
	system32\DRIVERS\RTL8139.SYS - stopped (demand) ("c:\windows\system32\drivers\rtl8139.sys") File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 6272, File modification date = 14/06/2006  08:50, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1000408079|0x9bb1dd670cb7505a90fc4e61d4aa8227|
	\SystemRoot\system32\DRIVERS\sr.sys - stopped (disabled) ("C:\WINDOWS\system32\drivers\sr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
	system32\DRIVERS\usbser_lowerflt.sys - stopped (demand) ("c:\windows\system32\drivers\usbser_lowerflt.sys") File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |1297056653|0xa34560a5d516a2f5240180370866b99d|
	system32\drivers\usbser.sys - stopped (demand) ("c:\windows\system32\drivers\usbser.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 03/08/2004  21:08, File description = USB Modem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938344023|0x49106ee29074e6a3d3ac9e24c6d791d8|
	system32\DRIVERS\usbser_lowerfltj.sys - stopped (demand) ("c:\windows\system32\drivers\usbser_lowerfltj.sys") File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |-1292586759|0x6410eebd6e0427466812858ee84c8467|
	system32\DRIVERS\USBSTOR.SYS - stopped (demand) ("c:\windows\system32\drivers\usbstor.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
	System32\Drivers\wdf01000.sys - stopped (demand) ("c:\windows\system32\drivers\wdf01000.sys") File version = 1.7.6001.0 (longhorn_rtm.080118-1840), File size = 503008, File modification date = 27/03/2008  14:27, File description = WDF Dynamic, Product Name = Microsoft Windows Operating System, Product version = 1.7.6001.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2088650301|0xbbcfeab7e871cddac2d397ee7fa91fdc|
	\SystemRoot\System32\drivers\ws2ifsl.sys - stopped (disabled) ("C:\WINDOWS\system32\drivers\ws2ifsl.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
	system32\DRIVERS\wudfrd.sys - stopped (demand) ("c:\windows\system32\drivers\wudfrd.sys") File version = 6.0.5730.0 (winmain.060915-1845), File size = 82688, File modification date = 15/09/2006  20:30, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-352712397|0x6e209664bdea8a15b5e8e480d6c607c2|
	\WINDOWS\system32\ntoskrnl.exe ("c:\windows\system32\ntoskrnl.exe") File version = 5.1.2600.3093 (xpsp_sp2_qfe.070227-2300), File size = 2183936, File modification date = 30/08/2007  07:29, File description =    NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.3093, Company name =   (  .   .) |-2068860591|0x32ff36db045a32f606f1eeec98c78954|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.2562 (xpsp.040919-1030), File size = 131712, File modification date = 30/08/2007  07:29, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2562, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |785062805|0xf9a83d160c80ee6f45aa577cb101b83f|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 18/08/2004  12:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 18/08/2004  12:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	spaw.sys
	\WINDOWS\System32\Drivers\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 18/08/2004  12:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	\WINDOWS\System32\Drivers\SCSIPORT.SYS ("c:\windows\system32\drivers\scsiport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96256, File modification date = 18/08/2004  12:00, File description = SCSI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-170042372|0xd7fd0ff761e28ac0ea35ad71e0cd67e9|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-898173944|0x520b91ab011456b940d9b05fc91108ff|
	intelide.sys ("c:\windows\system32\drivers\intelide.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42240, File modification date = 18/08/2004  12:00, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1645669973|0x65653f3b4477f3c63e68a9659f85ee2e|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
	dmload.sys ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	dmio.sys ("c:\windows\system32\drivers\dmio.sys") File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 18688, File modification date = 18/08/2004  12:00, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1387024081|0x3334430c29dc338092f79c38ef7b4cd0|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51968, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-266541180|0x30c744f65751e03465fb7e61315468a2|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1925477481|0xd86173b401470f06d9810f7962969ddf|
	fltMgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.2978 (xpsp.060821-0047), File size = 128768, File modification date = 30/08/2007  07:29, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-603269590|0x5a85cd3d07273e3f6fe72ee9c6431632|
	klbg.sys ("c:\windows\system32\drivers\klbg.sys") File version = 8.0.6.2, File size = 32784, File modification date = 29/01/2008  16:29, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1602996343|0x1fdd35aa7efaeb283198a3b14800f37e|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 92032, File modification date = 18/08/2004  12:00, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1324865035|0xeb7ffe87fd367ea8fca0506f74a87fbb|
	WudfPf.sys ("c:\windows\system32\drivers\wudfpf.sys") File version = 6.0.5730.0 (winmain.060915-1845), File size = 76544, File modification date = 15/09/2006  20:29, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1919534869|0x50eb9e21963b4f06fd010d007d54351b|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.3081 (xpsp_sp2_qfe.070209-0034), File size = 574976, File modification date = 09/02/2007  11:23, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3081, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1796445334|0x05ab81909514bfd69cbb1f2c147cf6b9|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 182912, File modification date = 18/08/2004  12:00, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |489683314|0x558635d3af1c7546d26067d5d9b6959e|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.2756 (xpsp.050908-1543), File size = 104704, File modification date = 30/08/2007  07:29, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2756, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1399797397|0xf66b6b1cddee6ca87cefc016eb7a0d8e|
	kl1.sys ("c:\windows\system32\drivers\kl1.sys") File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  16:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
	\WINDOWS\system32\drivers\TDI.SYS ("c:\windows\system32\drivers\tdi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18560, File modification date = 18/08/2004  12:00, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-750746922|0x6891b74ab9a016064e82a419388d0601|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
	\SystemRoot\system32\DRIVERS\ati2mtag.sys ("C:\WINDOWS\system32\drivers\ati2mtag.sys") File version = 6.14.10.6614, File size = 1540608, File modification date = 03/05/2006  16:50, File description = ATI Radeon WindowsNT Miniport Driver, Product Name = ATI Radeon WindowsNT Miniport Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-328657474|0x492bd2a5f65f218d4ede5764a3bb67e9|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 79744, File modification date = 18/08/2004  12:00, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1505993728|0xd5a9d123f5ed7c9965a481bd20cf66d8|
	\SystemRoot\system32\DRIVERS\usbuhci.sys ("C:\WINDOWS\system32\drivers\usbuhci.sys") File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 20608, File modification date = 30/08/2007  07:30, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1450715770|0x0ee1925590ba1abec14254d54d9870f4|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 143488, File modification date = 30/08/2007  07:30, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-892903559|0xaf45d7f3ddf2e2c2edcdb7ca34202668|
	\SystemRoot\system32\DRIVERS\klfltdev.sys ("C:\WINDOWS\system32\drivers\klfltdev.sys") File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  17:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 30208, File modification date = 30/08/2007  07:30, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1335945544|0xa45ea1550ea4b368c4fba7ca9d056bc9|
	\SystemRoot\system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145792, File modification date = 03/08/2004  19:15, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2134342417|0x5b0f00e43a7094c0b7e433cb42c79164|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60288, File modification date = 03/08/2004  19:08, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1594474973|0xff86422268de771d571e123eb7092c6a|
	\SystemRoot\system32\drivers\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140928, File modification date = 03/08/2004  19:15, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2104684906|0xb9540e258f952650de8dec68719a5c97|
	\SystemRoot\system32\DRIVERS\fdc.sys ("C:\WINDOWS\system32\drivers\fdc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
	\SystemRoot\system32\DRIVERS\parport.sys ("C:\WINDOWS\system32\drivers\parport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
	\SystemRoot\system32\DRIVERS\gameenum.sys ("C:\WINDOWS\system32\drivers\gameenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 10624, File modification date = 03/08/2004  23:08, File description = Game Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1413550789|0x5f92fd09e5610a5995da7d775eadcd12|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
	\SystemRoot\system32\DRIVERS\serial.sys ("C:\WINDOWS\system32\drivers\serial.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
	\SystemRoot\system32\DRIVERS\serenum.sys ("C:\WINDOWS\system32\drivers\serenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
	\SystemRoot\system32\DRIVERS\imapi.sys ("C:\WINDOWS\system32\drivers\imapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
	\SystemRoot\System32\Drivers\aujvo2vk.SYS ("C:\WINDOWS\system32\drivers\aujvo2vk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 0, File modification date = 01/01/1601  00:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
	\SystemRoot\system32\DRIVERS\klim5.sys ("C:\WINDOWS\system32\drivers\klim5.sys") File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  16:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\rdpdr.sys ("C:\WINDOWS\system32\drivers\rdpdr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 30/08/2007  07:31, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.3124 (xpsp_sp2_qfe.070423-0026), File size = 364160, File modification date = 30/08/2007  07:30, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-423551235|0x7b2170ee3d858ce8fbe503904cc9b663|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 30/08/2007  07:31, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 38016, File modification date = 18/08/2004  12:00, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |438037699|0x59fc3fb44d2669bc144fd87826bb571f|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 59264, File modification date = 30/08/2007  07:30, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243434234|0x6d46b1f89134892a862ac56b00ac11fe|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 18/08/2004  12:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\system32\DRIVERS\flpydisk.sys ("C:\WINDOWS\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
	\??\C:\WINDOWS\system32\Drivers\uzezmjy2.sys ("\\?\c:\windows\system32\drivers\uzezmjy2.sys") File version = 1, 3, 0, 0, File size = 11264, File modification date = 28/01/2009  09:59, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |1171257163|0xd565ad44c6c4d934afad3ca4196b09aa|
	\SystemRoot\system32\DRIVERS\klif.sys ("C:\WINDOWS\system32\drivers\klif.sys") File version = 8.1.0.100, File size = 213008, File modification date = 30/10/2008  09:23, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |751176906|0x266d62d1c999ca82586be43ec3a87adb|
	\SystemRoot\system32\DRIVERS\usbccgp.sys ("C:\WINDOWS\system32\drivers\usbccgp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 18/08/2004  12:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 18/08/2004  12:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
	\SystemRoot\System32\Drivers\mnmdd.SYS ("C:\WINDOWS\system32\drivers\mnmdd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = Frame buffer simulator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1594636198|0x4ae068242760a1fb6e1a44bf4e16afa6|
	\SystemRoot\System32\DRIVERS\RDPCDD.sys ("C:\WINDOWS\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19072, File modification date = 18/08/2004  12:00, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211014042|0x561b3a4333ca2dbdba28b5b956822519|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30848, File modification date = 18/08/2004  12:00, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1063322756|0x4f601bcb8f64ea3ac0994f98fed03f8e|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp.060420-0256), File size = 360576, File modification date = 14/10/2006  20:38, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2034869751|0xbb4d3a8e6f7eb1d370bc4ad27ab23368|
	\SystemRoot\system32\DRIVERS\netbt.sys ("C:\WINDOWS\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.2902 (xpsp.060505-0047), File size = 174592, File modification date = 30/08/2007  07:30, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-479133167|0xed375ce745c42a14f10753f7022ecd6a|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.2934 (xpsp.060620-0455), File size = 454656, File modification date = 30/08/2007  07:29, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2934, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-290306565|0x3ecc5f53a627b28a23aa7cc8c9376db4|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 34944, File modification date = 18/08/2004  12:00, File description =  FIPS Crypto, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |739370389|0x6792034d951145dd18d1d508578e4676|
	\SystemRoot\system32\DRIVERS\ipnat.sys ("C:\WINDOWS\system32\drivers\ipnat.sys") File version = 5.1.2600.2887 (xpsp.060413-1533), File size = 136320, File modification date = 30/08/2007  07:29, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2887, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-658852528|0x472c75f85e631f8aa87d21c9fee6238d|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
	\SystemRoot\system32\DRIVERS\usbscan.sys ("C:\WINDOWS\system32\drivers\usbscan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
	\SystemRoot\system32\DRIVERS\usbprint.sys ("C:\WINDOWS\system32\drivers\usbprint.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63744, File modification date = 18/08/2004  12:00, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1135615718|0xcd7d5152df32b47f4e36f710b35aae02|
	\SystemRoot\System32\Drivers\dump_atapi.sys
	\SystemRoot\System32\Drivers\dump_WMILIB.SYS
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.3115 (xpsp_sp2_qfe.070410-1252), File size = 1844096, File modification date = 30/08/2007  07:30, File description =   Win32, Product Name =   Microsoft Windows, Product version = 5.1.2600.3115, Company name =   (  .   .) |-486629102|0x500cf08d857466a819e813b64872bf31|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 18/08/2004  12:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17664, File modification date = 18/08/2004  12:00, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369096975|0xc9bf2f12c4e6c12f8a85fba4b6bc6208|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71040, File modification date = 18/08/2004  12:00, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-389278401|0xd3dac8432110aad0b02a58b4459ab835|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\ati2dvag.dll ("C:\WINDOWS\system32\ati2dvag.dll") File version = 6.14.10.6614, File size = 258048, File modification date = 03/05/2006  16:51, File description = ATI Radeon WindowsNT Display Driver, Product Name = ATI Radeon WindowsNT Display Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-824580928|0xea3652e94b86b75b5b3fc7bb1c13f204|
	\SystemRoot\System32\ati2cqag.dll ("C:\WINDOWS\system32\ati2cqag.dll") File version = 6.14.10.0313, File size = 282624, File modification date = 03/05/2006  16:09, File description = Central Memory Manager / Queue Server Module, Product Name = ATI Radeon Family, Product version = 5.2.3790.1830, Company name = ATI Technologies Inc. (Copyright (C) 1998-2003 ATI Technologies Inc.) |1876079511|0xcaf7ce583ad3a14e8623a80e4989a2c2|
	\SystemRoot\System32\atikvmag.dll ("C:\WINDOWS\system32\atikvmag.dll") File version = 6.14.10.0035, File size = 151552, File modification date = 03/05/2006  16:15, File description = Virtual Command And Memory Manager, Product Name = Virtual Command And Memory Manager, Product version = 5.2.3790.1830, Company name = ATI Technologies Inc. (Copyright (C) 1997-2005 ATI Technologies Inc.) |-2068818580|0xc12e5adb4abd2bfc8b5584d8daac297d|
	\SystemRoot\System32\ati3duag.dll ("C:\WINDOWS\system32\ati3duag.dll") File version = 6.14.10.0399, File size = 2693280, File modification date = 03/05/2006  16:35, File description = ati3duag.dll, Product Name = ATI Technologies Inc. Radeon DirectX Universal Driver, Product version = 6.14.10.0399, Company name = ATI Technologies Inc.  (Copyright (C) 1998-2002 ATI Technologies Inc.) |-173904131|0x9cff59c72cf6ece9da23efedba28d478|
	\SystemRoot\System32\ativvaxx.dll ("C:\WINDOWS\system32\ativvaxx.dll") File version = 6.14.01.0099, File size = 1408000, File modification date = 03/05/2006  16:29, File description = Radeon Video Acceleration Universal Driver, Product Name = ATI Technologies Inc. Radeon Video Acceleration Universal Driver, Product version = 6.14.01.0099, Company name = ATI Technologies Inc.  (Copyright (C) 1998-2005 ATI Technologies Inc.) |1461893587|0xf6602109544500f92053cea53ed225e5|
	\SystemRoot\System32\ATMFD.DLL ("C:\WINDOWS\system32\atmfd.dll") File version = 5.1 Build 226, File size = 285696, File modification date = 18/08/2004  12:00, File description = Windows NT OpenType/Type 1 Font Driver, Product Name = Adobe Type Manager, Product version = 5.1 Build 226, Company name = Adobe Systems Incorporated (1983-1990, 1993-2004 Adobe Systems Inc.) |1792691026|0x05072e97ee13e5e3bf3872f4345f82f0|
	\SystemRoot\system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 14592, File modification date = 30/08/2007  07:31, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |840521658|0x5146c3d286e66c72328f6ce6e4d983a8|
	\SystemRoot\system32\DRIVERS\rspndr.sys ("C:\WINDOWS\system32\drivers\rspndr.sys") File version = 5.1.2600.3029 (xpsp_sp2_qfe.061107-2325), File size = 62336, File modification date = 04/12/2006  09:03, File description = Link-Layer Topology Responder Driver for NDIS 6, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3029, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1771733776|0x0e11b35e972796042044bc27ce13b065|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
	\SystemRoot\System32\Drivers\ParVdm.SYS ("C:\WINDOWS\system32\drivers\parvdm.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 6912, File modification date = 18/08/2004  12:00, File description =   VDM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2114794461|0xf6167f46184c50a9bc2feb87067d1b97|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 82944, File modification date = 14/06/2006  09:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1519466349|0x0bfa8203b8148fb4e54bc212c41ce497|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
	\SystemRoot\System32\Drivers\Fastfat.SYS ("C:\WINDOWS\system32\drivers\fastfat.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description = Fast FAT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2107818381|0x3117f595e9615e04f05a54fc15a03b20|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.2974 (xpsp.060814-0204), File size = 332928, File modification date = 30/08/2007  07:30, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2022443734|0x5230953c21c811b5fc1ff31ae2b48097|
	\SystemRoot\System32\Drivers\HTTP.sys ("C:\WINDOWS\system32\drivers\http.sys") File version = 5.1.2600.2869 (xpsp.060316-1523), File size = 262656, File modification date = 30/08/2007  07:29, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2059224107|0x909d110c9634b0f1487eaaea837317d9|
	\SystemRoot\system32\DRIVERS\usb8023.sys ("c:\windows\system32\drivers\usb8023.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12672, File modification date = 18/08/2004  12:00, File description = Remote NDIS USB Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-582984044|0xaf090265ec388bab320f1ff7e7a7d5ea|
	\SystemRoot\system32\DRIVERS\RNDISMP.SYS ("C:\WINDOWS\system32\drivers\rndismp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30080, File modification date = 18/08/2004  12:00, File description = Remote NDIS Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |973374352|0x7ce8b277f3207ea82d7d22ad348befc6|
	\SystemRoot\system32\drivers\kmixer.sys ("C:\WINDOWS\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 172416, File modification date = 14/06/2006  08:50, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1130552819|0x8531438246ce9474e41ee1599904c0c7|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	\Program Files\DAEMON Tools Lite\daemon.dll ("c:\program files\daemon tools lite\daemon.dll") File version = 4.30.0.0, File size = 683488, File modification date = 21/07/2008  09:25, File description = DAEMON Tools Lite control library, Product Name = DAEMON Tools, Product version = 4.30.0.0, Company name = DT Soft Ltd. (Copyright (C) 2000-2008) |-330980480|0x11d0d5926b0fafb19d4a39fca6a6d9da|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 440, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  12:00, File description =    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (()  .   .) |-2018233285|0x6782caa22c9a071b3b4f7640952a8484|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

	PROCESS	csrss, PID = 488, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  12:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b10000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1852343270|0x46fde3a18bf348cb37c69f80e8f36925|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b20000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  12:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b30000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.3103 (xpsp_sp2_qfe.070316-1308), File size = 292864, File modification date = 30/08/2007  07:30, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.3103, Company name =   (  .   .) |-337051518|0x62d04d68a871703d959756573aa8a32f|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp.061019-0442), File size = 714240, File modification date = 30/08/2007  07:30, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |-921447871|0x2784682e37d70e4cd7af1091d481af23|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|

	PROCESS	winlogon, PID = 520, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 17/08/2004  17:05, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 17/08/2004  17:05, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp.050301-1521), File size = 62464, File modification date = 30/08/2007  07:29, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |81562758|0xe3331ca991acd1f20f79e01d5bc21643|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75910000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description =      DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1135066814|0x594cb60688052925a47bb9bf2eb0581d|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75900000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1817382660|0xe240a14197389c6ab541c45c33f7227c|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  12:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 18/08/2004  12:00, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\Ati2evxx.dll, MID = 10000000,  ("c:\windows\system32\ati2evxx.dll") File version = 6.14.10.4132, File size = 61440, File modification date = 03/05/2006  16:44, File description = ATI External Event Utility DLL Module, Product Name = ATI External Event Utility for NT, W2K and W9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |1169062802|0x0dc29a1fa52d445db14ddf16e272e6d1|
	  C:\WINDOWS\system32\cscdll.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\klogon.dll, MID = 6d4d0000,  ("c:\windows\system32\klogon.dll") File version = 8.0.0.454, File size = 218376, File modification date = 29/07/2008  18:21, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |101864652|0x1fe46082a766cebe72ff30d0de7ddcd1|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75920000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1480000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp.061019-0442), File size = 714240, File modification date = 30/08/2007  07:30, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |-921447871|0x2784682e37d70e4cd7af1091d481af23|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|

	PROCESS	services, PID = 564, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 77b60000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 320000, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1438568854|0xb72ce4d02710c8bdbb4672a4f93e7a14|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp.050301-1521), File size = 62464, File modification date = 30/08/2007  07:29, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |81562758|0xe3331ca991acd1f20f79e01d5bc21643|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.2744 (xpsp.050822-1649), File size = 123904, File modification date = 30/08/2007  07:30, File description =     (Plug-and-Play), Product Name =   Microsoft Windows, Product version = 5.1.2600.2744, Company name =   (  .   .) |525549914|0x1c8e2ca6ccbaee79420f7514e2f6b241|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\eventlog.dll, MID = 772f0000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1293876684|0x6cd35be0991df15a07bc60b894e6482b|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|

	PROCESS	lsass, PID = 576, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75410000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 728576, File modification date = 30/08/2007  07:29, File description =  DLL  LSA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2976, Company name =   (  .   .) |-1627853445|0x17747a3431acdf59d79b57afb3b39685|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74400000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 427520, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1859521497|0x356779ca52f2b3c073335b9aad53ecff|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msprivs.dll, MID = 20000000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100154152|0x06d8bdd91fd844e1a4c3107d531063fd|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp.050614-1527), File size = 297984, File modification date = 30/08/2007  07:29, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193136950|0x16d916e1b76cb6b6e46f13b6b8975bbb|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\netlogon.dll, MID = 74470000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 407040, File modification date = 18/08/2004  12:00, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1815651328|0x4922b0c854a0b4a2cd2061bbfe29b251|
	  C:\WINDOWS\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_qfe.070425-0226), File size = 144896, File modification date = 30/08/2007  07:30, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829972792|0xaa2a6017637279c153886c720120d5a1|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\wdigest.dll, MID = 74340000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.2874 (xpsp.060323-1528), File size = 49152, File modification date = 30/08/2007  07:30, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2874, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-737452420|0xdfec825abd6304f9d39820261582db9f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\scecli.dll, MID = 743d0000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1597674520|0x5d5a37c65a5e86ed3811a4128b3a84e4|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743a0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  12:00, File description = Windows IPSEC SPD Server DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1339158444|0x328339d5923c6b1fe79d4244a9a8c725|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp.050301-1521), File size = 62464, File modification date = 30/08/2007  07:29, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |81562758|0xe3331ca991acd1f20f79e01d5bc21643|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75700000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 267264, File modification date = 18/08/2004  12:00, File description =   Oakley, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1811355481|0xdf4547567f210f88f74f31de6e5a6997|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 74360000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1065846480|0x15859ade25a14154f0153ec5c3866272|
	  C:\WINDOWS\system32\psbase.dll, MID = 74380000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1945025660|0x639ebd64394197c0f74a1a2ef66ed18e|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|

	PROCESS	ati2evxx, PID = 728, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\Ati2evxx.exe
		  "c:\windows\system32\ati2evxx.exe" File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
	  C:\WINDOWS\system32\Ati2evxx.exe, MID = 400000,  ("c:\windows\system32\ati2evxx.exe") File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\Ati2edxx.dll, MID = ad0000,  ("c:\windows\system32\ati2edxx.dll") File version = 6, 14, 10, 2500, File size = 41984, File modification date = 03/05/2006  16:45, File description = ati2edxx, Product Name = ATI External Device Utility, Product version = 6, 14, 10, 2500, Company name = ATI Technologies, Inc. (Copyright (c) ATI Technologies Inc. 2003) |429157209|0x3b5286e4ae1b4a17f5fccec23c240f02|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|

	PROCESS	svchost, PID = 744, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  c:\windows\system32\termsrv.dll, MID = 766e0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
	  c:\windows\system32\ICAAPI.dll, MID = 74f30000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |422815548|0xa7b6bc89a619b6b747d9f9f7dc215cfa|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp.050301-1521), File size = 62464, File modification date = 30/08/2007  07:29, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |81562758|0xe3331ca991acd1f20f79e01d5bc21643|
	  c:\windows\system32\mstlsapi.dll, MID = 750d0000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 115712, File modification date = 18/08/2004  12:00, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-7798303|0x01b9bd9a50558626fec221f5323dd5d2|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 18/08/2004  12:00, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  c:\windows\system32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|

	PROCESS	svchost, PID = 816, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\wshbth.dll, MID = 75000000,  ("c:\windows\system32\wshbth.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108032, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |101157119|0x4701970cd9e693d25104d8e442c53d10|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 7680, File modification date = 30/08/2007  07:30, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1058593106|0xf05832bb22814eccee31c8f927206095|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	svchost, PID = 860, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\shsvcs.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\System32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  c:\windows\system32\dhcpcsvc.dll, MID = 76d70000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 111616, File modification date = 30/08/2007  07:29, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-813523932|0x4e65d2c8c85bd103b532c682cd7b0a95|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\wzcsvc.dll, MID = 7db10000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 476160, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |710790892|0xdee39d73aad0e322821efe0a8b1fd0f7|
	  c:\windows\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  c:\windows\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  c:\windows\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 30/08/2007  07:29, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1194219110|0x495519ae53384ce333aad8394e991f92|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\System32\SETUPAPI.DLL, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\System32\rastls.dll, MID = 76bb0000,  ("c:\windows\system32\rastls.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 112640, File modification date = 18/08/2004  12:00, File description =    PPP EAP-TLS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |94570726|0xb020978349743f090e521b53d6a2a149|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 824320, File modification date = 17/08/2007  20:07, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123309618|0xd0fabf826aa178fe25e08bf4912d128c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = b90000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 20/06/2007  06:49, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 267776, File modification date = 15/08/2007  05:37, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1828061250|0x84e077c88627829a97c156c3b4179009|
	  C:\WINDOWS\System32\MPRAPI.dll, MID = 76d30000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 87040, File modification date = 18/08/2004  12:00, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-973786734|0x8cbd5fab0bc10357d0c982ffc5d89af0|
	  C:\WINDOWS\System32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 18/08/2004  12:00, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  C:\WINDOWS\System32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\System32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\System32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 18/08/2004  12:00, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\System32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  12:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\System32\SCHANNEL.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_qfe.070425-0226), File size = 144896, File modification date = 30/08/2007  07:30, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829972792|0xaa2a6017637279c153886c720120d5a1|
	  C:\WINDOWS\System32\WinSCard.dll, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 18/08/2004  12:00, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\System32\raschap.dll, MID = 76cd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69632, File modification date = 18/08/2004  12:00, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1908848325|0x52489757d3090f02c290c90877f1492e|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  c:\windows\system32\schedsvc.dll, MID = 76860000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
	  c:\windows\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f10000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1560411407|0x2cb2667f7caf6afa2233a5568b2b4dd4|
	  c:\windows\system32\audiosrv.dll, MID = 70e40000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
	  c:\windows\system32\wkssvc.dll, MID = 76e30000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 132096, File modification date = 30/08/2007  07:30, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-839842849|0x8d2b608fcbf35d26558aece5047bdc60|
	  c:\windows\system32\cryptsvc.dll, MID = 76d00000,  ("c:\windows\system32\cryptsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
	  c:\windows\system32\certcli.dll, MID = 76b50000,  ("c:\windows\system32\certcli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196096, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |321406248|0x9f00937676fca40de3a772e076ccb39d|
	  c:\windows\system32\dmserver.dll, MID = 74f50000,  ("c:\windows\system32\dmserver.dll") File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
	  c:\windows\system32\ersvc.dll, MID = 74f40000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
	  c:\windows\system32\es.dll, MID = 77700000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.310, File size = 243200, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-872367420|0x5c41d9f18ab39c703de13ce02982ef25|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f00000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
	  c:\windows\system32\srvsvc.dll, MID = 75050000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.2577 (xpsp.041130-1728), File size = 96768, File modification date = 30/08/2007  07:30, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |527826292|0xab340e995ce348694d97cadd6eb969c1|
	  c:\windows\system32\netman.dll, MID = 77cf0000,  ("c:\windows\system32\netman.dll") File version = 5.1.2600.2743 (xpsp.050819-1528), File size = 197632, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1878580285|0xadeaa9ab29e4f529bb7e6f036d35fc7b|
	  c:\windows\system32\netshell.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 1709056, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |520659526|0xab8a8f1da31b1b4810b3bba899fa6470|
	  c:\windows\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  c:\windows\system32\WZCSAPI.DLL, MID = 72ff0000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 52736, File modification date = 30/08/2007  07:31, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |196299891|0x41b856e3a7e8c3d8912bff1e5131fafa|
	  c:\windows\system32\sens.dll, MID = 722b0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
	  c:\windows\system32\seclogon.dll, MID = 73ce0000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
	  c:\windows\system32\srsvc.dll, MID = 75160000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
	  c:\windows\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\System32\HNETCFG.DLL, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp.061019-0442), File size = 714240, File modification date = 30/08/2007  07:30, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |-921447871|0x2784682e37d70e4cd7af1091d481af23|
	  c:\windows\system32\trkwks.dll, MID = 75030000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
	  c:\windows\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  c:\windows\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 5a8f0000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753a0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 430592, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1849286963|0xce576cee0842e1fca711d95653d2f9c1|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 7.0.6000.374 (winmain(wmbla).070416-2057), File size = 25944, File modification date = 30/08/2007  07:30, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.374, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1438381568|0x365980da5b43b397542429b0743e6226|
	  c:\windows\system32\browser.dll, MID = 77310000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 1712984, File modification date = 30/08/2007  07:30, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |567071557|0x3eec20e41f5f331b94002970ceaec92f|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\System32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  c:\windows\system32\wscsvc.dll, MID = 4c100000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
	  c:\windows\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 30/08/2007  07:29, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702017894|0x667c53f0b02416b9f2ef0f240dccc3b8|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\wbem\wbemcore.dll, MID = 76290000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.2829 (xpsp.060116-1550), File size = 530944, File modification date = 30/08/2007  07:30, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2829, Company name =   (  .   .) |1447355105|0xdbd6db3d0127f3be930259b1d70711e6|
	  C:\WINDOWS\system32\wbem\esscli.dll, MID = 752d0000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247808, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1415488570|0xf0b1f4f8d4e5d640d98dd4a7c6bbb510|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 760c0000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.310, File size = 1267712, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-1640105784|0xfe3826e79675607c5d26b8b078a998e3|
	  C:\WINDOWS\system32\colbact.DLL, MID = 750f0000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.310, File size = 60416, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-1058660139|0x58273956030c1418cd623c995bf6781c|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750b0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.311, File size = 66560, File modification date = 30/08/2007  07:29, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |2078416023|0x0701085dfc89fd45a26c8e3d910ebeab|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d90000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57856, File modification date = 18/08/2004  12:00, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1563754742|0x7a745ffc0fc5b9cd58b8078fb9c5017a|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 75070000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 18/08/2004  12:00, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190749271|0x0cd39488ace702f54263ec35176d15c8|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 751c0000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |642863371|0xc9de8d23517f72eaa7065597b1a7720b|
	  c:\windows\system32\ipnathlp.dll, MID = 669c0000,  ("c:\windows\system32\ipnathlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp.050301-1521), File size = 62464, File modification date = 30/08/2007  07:29, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |81562758|0xe3331ca991acd1f20f79e01d5bc21643|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 599d0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 437248, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1721772680|0x498ce5fcdc44b9a9a800bc2e05630b87|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75350000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 273920, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1110874053|0xa1129f477083a8c617d7b07d1fc7487e|
	  C:\WINDOWS\System32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5fc60000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47104, File modification date = 18/08/2004  12:00, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742919636|0x6674ef0f555409de0bf269116a4ca9ff|
	  C:\WINDOWS\system32\upnp.dll, MID = 76dd0000,  ("c:\windows\system32\upnp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 132608, File modification date = 18/08/2004  12:00, File description = Universal Plug and Play API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1640714709|0x296fc471c4d403a263ff652a08ac4704|
	  C:\WINDOWS\system32\SSDPAPI.dll, MID = 74ec0000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34816, File modification date = 18/08/2004  12:00, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-853188418|0xea67cea66574d77e10fec372afdf26e8|
	  C:\WINDOWS\system32\netcfgx.dll, MID = 755c0000,  ("c:\windows\system32\netcfgx.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 625152, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-788457764|0x1cfb312d5f28f5db4753c4770c8a5f20|
	  C:\WINDOWS\System32\rasmans.dll, MID = 7ded0000,  ("c:\windows\system32\rasmans.dll") File version = 5.1.2600.2936 (xpsp.060621-2356), File size = 180736, File modification date = 30/08/2007  07:30, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1141207705|0x906b4a6b66d05ad9a7a9bf312ce31348|
	  C:\WINDOWS\System32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  c:\windows\system32\tapisrv.dll, MID = 733a0000,  ("c:\windows\system32\tapisrv.dll") File version = 5.1.2600.2716 (xpsp.050707-1657), File size = 249344, File modification date = 30/08/2007  07:30, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |468930062|0x56a6eeb68ec3ae46b80bd0464f7ba023|
	  c:\windows\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\System32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 7680, File modification date = 30/08/2007  07:30, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1058593106|0xf05832bb22814eccee31c8f927206095|
	  C:\WINDOWS\System32\rastapi.dll, MID = 75ad0000,  ("c:\windows\system32\rastapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 18/08/2004  12:00, File description = Remote Access TAPI Compliance Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1633354971|0xc4b9e76c79610e7c20c7b304a363938c|
	  C:\WINDOWS\System32\unimdm.tsp, MID = 57e80000,  ("c:\windows\system32\unimdm.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 207360, File modification date = 18/08/2004  12:00, File description =   Unimodem 5, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-745728709|0x1539d73534395ad9ff191e00102a2082|
	  C:\WINDOWS\System32\uniplat.dll, MID = 71fe0000,  ("c:\windows\system32\uniplat.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = Unimodem AT Mini Driver Platform Driver for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-235878405|0xa42a7758474f74f5d85d08c30aaa3dcc|
	  C:\WINDOWS\System32\kmddsp.tsp, MID = 57f00000,  ("c:\windows\system32\kmddsp.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =     TAPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Microsoft, 1995.   .) |2115167994|0xdf0ee1993de417a03ff6f1c5783edf0a|
	  C:\WINDOWS\System32\ndptsp.tsp, MID = 57ee0000,  ("c:\windows\system32\ndptsp.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description =   TAPI NDIS-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  , 1997.   .) |-1100799794|0x259d273a8f512311603f7ab638911fb1|
	  C:\WINDOWS\System32\ipconf.tsp, MID = 57f10000,  ("c:\windows\system32\ipconf.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description =     TAPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1551456071|0xa97b00712f9c301bbec96fd54dccaffc|
	  C:\WINDOWS\System32\h323.tsp, MID = 57f30000,  ("c:\windows\system32\h323.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 265728, File modification date = 18/08/2004  12:00, File description =    H.323 (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1406568753|0xc04d501f2edbf300a5a87561e34ce770|
	  C:\WINDOWS\System32\hidphone.tsp, MID = 57f20000,  ("c:\windows\system32\hidphone.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29696, File modification date = 18/08/2004  12:00, File description =   HID- (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |715353668|0xb273ff2f94285565132d24af8a577a23|
	  C:\WINDOWS\System32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 30/08/2007  07:31, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  C:\WINDOWS\System32\rasppp.dll, MID = 72220000,  ("c:\windows\system32\rasppp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 206336, File modification date = 18/08/2004  12:00, File description = Remote Access PPP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1891367443|0x4df701d1c961e464263ef9f6fe7b0679|
	  C:\WINDOWS\System32\ntlsapi.dll, MID = 72470000,  ("c:\windows\system32\ntlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8192, File modification date = 18/08/2004  12:00, File description = Microsoft License Server Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |272764293|0xbedfafaaa5a3dc8cc57ac2dfc4ff96b3|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp.050614-1527), File size = 297984, File modification date = 30/08/2007  07:29, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193136950|0x16d916e1b76cb6b6e46f13b6b8975bbb|
	  C:\WINDOWS\System32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\System32\RASDLG.dll, MID = 768b0000,  ("c:\windows\system32\rasdlg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 667136, File modification date = 18/08/2004  12:00, File description = API     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1681926931|0x6bc4ea8eb46e1a28bf49ab7c0bc1758e|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\wups2.dll, MID = 50e60000,  ("c:\windows\system32\wups2.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 43352, File modification date = 27/08/2007  09:16, File description = Windows Update client proxy stub 2, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |760780347|0xceb1bd87fbcb5984bdf7dc0991a060b5|
	  C:\WINDOWS\system32\wups.dll, MID = 50640000,  ("c:\windows\system32\wups.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 33624, File modification date = 30/08/2007  07:30, File description = Windows Update client proxy stub, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |412830850|0xa236f41b92b3ceac754943fef30c884e|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73cf0000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632448235|0x90cfbeab0c25c855f48b86b3323636b2|

	PROCESS	svchost, PID = 980, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\wudfsvc.dll, MID = 20d40000,  ("c:\windows\system32\wudfsvc.dll") File version = 6.0.5730.0 (winmain.060915-1845), File size = 55296, File modification date = 15/09/2006  21:30, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2058699194|0xae93084d2d236887ba56467ae42b4955|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  c:\windows\system32\WUDFPlatform.dll, MID = 660000,  ("c:\windows\system32\wudfplatform.dll") File version = 6.0.5730.0 (winmain.060915-1845), File size = 163840, File modification date = 15/09/2006  20:29, File description = Windows Driver Foundation - User-mode Platform Library, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-334774397|0x904120aab6ef27b6af73c19d09eb2695|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|

	PROCESS	ati2evxx, PID = 1092, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = Ati2evxx.exe -Client
		  "c:\windows\system32\ati2evxx.exe" File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
	  C:\WINDOWS\system32\Ati2evxx.exe, MID = 400000,  ("c:\windows\system32\ati2evxx.exe") File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\Ati2edxx.dll, MID = c20000,  ("c:\windows\system32\ati2edxx.dll") File version = 6, 14, 10, 2500, File size = 41984, File modification date = 03/05/2006  16:45, File description = ati2edxx, Product Name = ATI External Device Utility, Product version = 6, 14, 10, 2500, Company name = ATI Technologies, Inc. (Copyright (c) ATI Technologies Inc. 2003) |429157209|0x3b5286e4ae1b4a17f5fccec23c240f02|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|

	PROCESS	explorer, PID = 1144, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\Explorer.EXE
		  "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311), File size = 1033728, File modification date = 30/08/2007  07:29, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-581932639|0xa1bfbe52e8865c5641ac6eb1cee8db26|
	  C:\WINDOWS\Explorer.EXE, MID = 1000000,  ("c:\windows\explorer.exe") File version = 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311), File size = 1033728, File modification date = 30/08/2007  07:29, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-581932639|0xa1bfbe52e8865c5641ac6eb1cee8db26|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 77750000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 824320, File modification date = 17/08/2007  20:07, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123309618|0xd0fabf826aa178fe25e08bf4912d128c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 400000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 20/06/2007  06:49, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 267776, File modification date = 15/08/2007  05:37, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1828061250|0x84e077c88627829a97c156c3b4179009|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\themeui.dll, MID = 5bf40000,  ("c:\windows\system32\themeui.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 18/08/2004  12:00, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\ACTXPRXY.DLL, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\msutb.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 18/08/2004  12:00, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 30/08/2007  07:29, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702017894|0x667c53f0b02416b9f2ef0f240dccc3b8|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp.050831-1531), File size = 19968, File modification date = 30/08/2007  07:29, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2099116578|0xb489faa0105744beb96594e2974dcf69|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\ieframe.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 1154048, File modification date = 17/08/2007  20:07, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |917758552|0x433493c74172ca5f931caa87c577f20f|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2530 (xpsp.040919-1030), File size = 586240, File modification date = 30/08/2007  07:29, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2530, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1833561173|0xdda367030f9cd794b734a1d8a58b3d36|
	  C:\WINDOWS\system32\NETSHELL.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 1709056, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |520659526|0xab8a8f1da31b1b4810b3bba899fa6470|
	  C:\WINDOWS\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\mslbui.dll, MID = 60af0000,  ("c:\windows\system32\mslbui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 18/08/2004  12:00, File description =  LangageBar, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2097516122|0x678a1c69ef9c04112d0f77d2f810742a|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\webcheck.dll, MID = 43540000,  ("c:\windows\system32\webcheck.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
	  C:\WINDOWS\system32\stobject.dll, MID = 75d70000,  ("c:\windows\system32\stobject.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 18/08/2004  12:00, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
	  C:\WINDOWS\system32\BatMeter.dll, MID = 74ab0000,  ("c:\windows\system32\batmeter.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 18/08/2004  12:00, File description = Battery Meter Helper DLL, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |531317817|0xaebe4b82f63974384aea2520cb34b23b|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WPDShServiceObj.dll, MID = 164a0000,  ("c:\windows\system32\wpdshserviceobj.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 18/10/2006  17:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\system32\mydocs.dll, MID = 723f0000,  ("c:\windows\system32\mydocs.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
	  C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll, MID = 10000000,  ("c:\program files\nokia\nokia pc suite 7\phonebrowser.dll") File version = 7, 1, 105, 0, File size = 613888, File modification date = 08/09/2008  06:58, File description = Phone Browser, Product Name = Phone Browser, Product version = 3.0, Company name = Nokia (Copyright  2006-2008 Nokia. All rights reserved.) |1386149333|0xe8a41d540f5079d90d570c2255e9edf9|
	  C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.DLL, MID = 1e10000,  ("c:\program files\nokia\nokia pc suite 7\ngscm.dll") File version = 7, 1, 151, 0, File size = 925696, File modification date = 11/11/2008  05:31, File description = Next Gen Suite Common Modules, Product Name = Next Gen Suite Common Modules, Product version = 1.0, Company name = Nokia (Copyright  2004 - 2008 Nokia) |55673104|0xeedb1fb050c3ca0ba6f36849adf25989|
	  C:\WINDOWS\system32\OLEPRO32.DLL, MID = 5f2f0000,  ("c:\windows\system32\olepro32.dll") File version = 5.1.2600.2180, File size = 83456, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |713033869|0xb9a2fff59210671ab63f3f842653c811|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 18/08/2004  12:00, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll") File version = 8.00.50727.762, File size = 548864, File modification date = 01/12/2006  19:54, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1359536405|0x4c8a880eabc0b4d462cc4b2472116ea1|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll, MID = 78130000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll") File version = 8.00.50727.762, File size = 626688, File modification date = 01/12/2006  19:54, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |412186895|0xe4fece18310e23b1d8fee993e35e7a6f|
	  C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_rus.nlr, MID = 2000000,  ("c:\program files\nokia\nokia pc suite 7\lang\phonebrowser_rus.nlr") File version = 7, 1, 66, 0, File size = 27648, File modification date = 24/10/2008  04:58, File description = Nokia Phone Browser language resources, Product Name = Nokia Phone Browser, Product version = 6, 0, 9, 0, Company name = Nokia (Copyright (c) 2002 - 2008 Nokia.   .) |2083843184|0xa427d835713eccb5e3a5543f5c0e605f|
	  C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr, MID = 2010000,  ("c:\program files\nokia\nokia pc suite 7\resource\phonebrowser_nokia.ngr") File version = 7, 1, 21, 0, File size = 573440, File modification date = 25/08/2008  05:23, File description = Nokia Phone Browser graphics resources, Product Name = Nokia Phone Browser, Product version = 1, 0, Company name = Nokia (Copyright  2001-2008 Nokia. All rights reserved.) |1226698458|0x5058d323ddabfad0d8d8bc2caef73070|
	  C:\WINDOWS\system32\PortableDeviceTypes.dll, MID = 109c0000,  ("c:\windows\system32\portabledevicetypes.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 166912, File modification date = 18/10/2006  17:47, File description = Windows Portable Device (Parameter) Types Component, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |186518969|0x22358578cb321f3325496a3723029409|
	  C:\WINDOWS\system32\PortableDeviceApi.dll, MID = 10930000,  ("c:\windows\system32\portabledeviceapi.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 284160, File modification date = 18/10/2006  17:47, File description = Windows Portable Device API Components, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-387235283|0x9d45b2201d0ecf9f42136c7b99deb8b2|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll, MID = 2330000,  ("c:\program files\malwarebytes' anti-malware\mbamext.dll") File version = 1, 1, 0, 0, File size = 73360, File modification date = 14/01/2009  14:11, File description = Malwarebytes' Anti-Malware, Product Name = Malwarebytes' Anti-Malware, Product version = 1, 1, 0, 0, Company name = Malwarebytes Corporation ( Malwarebytes Corporation. All rights reserved.) |1121151919|0xc6aebea6a09841b2ee7a495085462f4d|
	  C:\WINDOWS\system32\browselc.dll, MID = 2390000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 66560, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-855201112|0x599c0ccb1f4843b2f17450a078d05ded|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll, MID = 25a0000,  ("c:\program files\common files\adobe\acrobat\activex\pdfshell.dll") File version = 9.0.0.2008061100, File size = 378200, File modification date = 11/06/2008  20:49, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 9.0.0.2008061100, Company name = Adobe Systems, Inc. (Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.) |-2113453967|0x3998f895e95b6cc147bf7815ee90424a|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.RUS, MID = 2610000,  ("c:\program files\common files\adobe\acrobat\activex\pdfshell.rus") File version = 9.0.0.0, File size = 311296, File modification date = 26/08/2008  02:16, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 9.0.0.0, Company name = Adobe Systems, Inc. (Copyright 2000-2007 Adobe Systems, Inc.) |-1164467403|0x085d050beb332461245b4077c9b152af|
	  C:\WINDOWS\system32\DUSER.dll, MID = 6c730000,  ("c:\windows\system32\duser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 304128, File modification date = 18/08/2004  12:00, File description = Windows DirectUser Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663281275|0x8804a551680a2811621fff1235625393|
	  C:\WINDOWS\system32\wmpshell.dll, MID = 14070000,  ("c:\windows\system32\wmpshell.dll") File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\WZCSAPI.DLL, MID = 72ff0000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 52736, File modification date = 30/08/2007  07:31, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |196299891|0x41b856e3a7e8c3d8912bff1e5131fafa|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp.061019-0442), File size = 714240, File modification date = 30/08/2007  07:30, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |-921447871|0x2784682e37d70e4cd7af1091d481af23|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 18/08/2004  12:00, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 18/08/2004  12:00, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\cryptnet.dll, MID = 75f10000,  ("c:\windows\system32\cryptnet.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 18/08/2004  12:00, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
	  C:\WINDOWS\system32\SensApi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|
	  C:\WINDOWS\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\Program Files\WinRAR\rarext.dll, MID = 2890000,  ("c:\program files\winrar\rarext.dll") File version = (null), File size = 128512, File modification date = 29/05/2007  23:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-400282785|0x48d60d2f02af2ae613b12528669a4506|
	  C:\WINDOWS\system32\zipfldr.dll, MID = 73340000,  ("c:\windows\system32\zipfldr.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  12:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\odbcint.dll, MID = 2ff0000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\DSOUND.dll, MID = 73ed0000,  ("c:\windows\system32\dsound.dll") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 367616, File modification date = 18/08/2004  12:00, File description = DirectSound, Product Name =   Microsoft(R) Windows(R), Product version = 5.3.2600.2180, Company name =   (  .   .) |-1604342746|0x8b4c47df3f10153e8f20dd1c0cf3341b|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ShellEx.dll, MID = 6d910000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\shellex.dll") File version = 8.0.0.454, File size = 39688, File modification date = 29/07/2008  18:22, File description = Windows Shell Extension, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |1162027319|0xca35a64cabc0c4c9d58e8395124a1017|

	PROCESS	svchost, PID = 1260, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\lmhsvc.dll, MID = 74c00000,  ("c:\windows\system32\lmhsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\webclnt.dll, MID = 5abc0000,  ("c:\windows\system32\webclnt.dll") File version = 5.1.2600.2821 (xpsp.060103-1543), File size = 68096, File modification date = 30/08/2007  07:30, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |84805698|0x92ec063a21152466e754e4d1cb2af302|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 824320, File modification date = 17/08/2007  20:07, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123309618|0xd0fabf826aa178fe25e08bf4912d128c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 6f0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 20/06/2007  06:49, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 267776, File modification date = 15/08/2007  05:37, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1828061250|0x84e077c88627829a97c156c3b4179009|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\ssdpsrv.dll, MID = 76620000,  ("c:\windows\system32\ssdpsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	spoolsv, PID = 1340, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp.050610-1527), File size = 57856, File modification date = 30/08/2007  07:30, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1793708297|0xad3d9d191aea7b5445fe1d82ffbb4788|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.2696 (xpsp.050610-1527), File size = 57856, File modification date = 30/08/2007  07:30, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1793708297|0xad3d9d191aea7b5445fe1d82ffbb4788|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742a0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-616758463|0x58f1353020b1bf30b6890bb3251471e7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 7680, File modification date = 30/08/2007  07:30, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1058593106|0xf05832bb22814eccee31c8f927206095|
	  C:\WINDOWS\system32\localspl.dll, MID = 75b80000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 342528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1133760147|0x419b4ea8a0fba2939e16d2c82de2293c|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\winspool.drv, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 74260000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 48128, File modification date = 30/08/2007  07:31, File description =     Canon Bubble-Jet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2082, Company name =   (  .   .) |-1278402524|0xc267f467a22ad261de0c443bec5e68a7|
	  C:\WINDOWS\system32\CNARLMNT.DLL, MID = 10000000,  ("c:\windows\system32\cnarlmnt.dll") File version = 1.0.0.0, File size = 57344, File modification date = 09/09/2004  18:01, File description = Canon MF8100 Series LanguageMonitor., Product Name = Canon MF8100 Series LanguageMonitor., Product version = 1, 0, 0, 0, Company name = ???????? (Copyright Canon Inc. 2004) |-1339897594|0x05e363f58ecf3b5e01ee08e59f8d8ad7|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\mdimon.dll, MID = 980000,  ("c:\windows\system32\mdimon.dll") File version = 11.3.1897.0, File size = 17920, File modification date = 18/06/2003  22:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-2083428410|0xcf0376023360aadd55c89ba50564afdc|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 30/08/2007  07:29, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702017894|0x667c53f0b02416b9f2ef0f240dccc3b8|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74240000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 30/08/2007  07:31, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1959717125|0x01b371b2f51a318513776b6c4b6ae50f|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 723e0000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 46080, File modification date = 18/08/2004  12:00, File description =    TCP/IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1757915598|0x73893592069e625c63ba33f755ec4ed7|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723d0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-833273859|0x44ed1b16547ac163585e84e0630da3e2|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll, MID = 990000,  ("c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll") File version = 11.3.1897.0, File size = 18944, File modification date = 18/06/2003  22:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-1464179435|0x58e13a2292839321d3cdc918d5a4f5ae|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\wshbth.dll, MID = 75000000,  ("c:\windows\system32\wshbth.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108032, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |101157119|0x4701970cd9e693d25104d8e442c53d10|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75be0000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description = 32-  API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1876362858|0x49d07a8ca1728f2058fb640d58783886|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\inetpp.dll, MID = 742c0000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description =  DLL Internet Print Provider, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2047356304|0xd9e0a0f626a878000b14ec5d7ad6e55e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|

	PROCESS	svchost, PID = 1500, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k bthsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\bthserv.dll, MID = 4c0d0000,  ("c:\windows\system32\bthserv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Bluetooth Support Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1234028331|0xe70ea8bab71fc7c56615cf68589662b5|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|

	PROCESS	svchost, PID = 1704, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost.exe -k imgsvc
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\wiaservc.dll, MID = 75a70000,  ("c:\windows\system32\wiaservc.dll") File version = 5.1.2600.3051 (xpsp_sp2_qfe.061219-0311), File size = 333824, File modification date = 30/08/2007  07:30, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |1127711379|0x5b49a3c13906fafacd2cb055a0c9c70a|
	  c:\windows\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  c:\windows\system32\mscms.dll, MID = 73af0000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.2709 (xpsp.050628-1523), File size = 73728, File modification date = 30/08/2007  07:29, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2709, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |304704181|0x782652865b7cfc28f25fb20389d609f6|
	  c:\windows\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  c:\windows\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\CNCC5750.DLL, MID = 10000000,  ("c:\windows\system32\cncc5750.dll") File version = 1.2.1, File size = 552960, File modification date = 09/09/2004  17:59, File description = WIA Scanner Driver dll for MF5750, Product Name = WIA Scanner Driver, Product version = 1.2.1, Company name = CANON INC. (Copyright CANON INC. 2004 All Rights Reserved) |-819565816|0x443665ad805c7c591cb86aec8dd5e12c|
	  C:\WINDOWS\system32\CNCL5750.DLL, MID = 850000,  ("c:\windows\system32\cncl5750.dll") File version = 1, 0, 0, 1, File size = 61440, File modification date = 09/09/2004  18:00, File description = CNCL5750, Product Name = ScanGear, Product version = 10.1, Company name = CANON INC. (Copyright CANON INC. 2004 All Rights) |-565749334|0x9053862abbb065426274207d59d72cdb|
	  C:\WINDOWS\system32\CNCLSI12.DLL, MID = 880000,  ("c:\windows\system32\cnclsi12.dll") File version = 1.20, File size = 114688, File modification date = 09/09/2004  18:01, File description =  Exposed API to the MP Interface, Product Name = Canon MF, Product version = 1.20, Company name = Canon Inc. (Copyright (C) 2004 Canon Inc.) |527849622|0x01d6006ef2e0affad6d44af218d666b5|
	  C:\WINDOWS\system32\CNCLSU12.DLL, MID = 8a0000,  ("c:\windows\system32\cnclsu12.dll") File version = 1.20, File size = 98304, File modification date = 09/09/2004  18:01, File description = MFP System services Module, Product Name = Canon MF, Product version = 1.20, Company name = Canon Inc. (Copyright (C) 2004 Canon Inc.) |1012141760|0xa803fd549564f61266e301cd5629619e|
	  C:\WINDOWS\system32\CNCLSD12.DLL, MID = 8e0000,  ("c:\windows\system32\cnclsd12.dll") File version = 1.20, File size = 126976, File modification date = 09/09/2004  18:01, File description =  Exposed API to the MFP Scanner Interface, Product Name = Canon MF, Product version = 1.20, Company name = Canon Inc. (Copyright (C) 2004 Canon Inc.) |-401662743|0xb317229835bec0b887e7fab2b72cb967|
	  C:\WINDOWS\system32\CNCLSC12.DLL, MID = 900000,  ("c:\windows\system32\cnclsc12.dll") File version = 1.20, File size = 77824, File modification date = 09/09/2004  18:01, File description =  ACTif command generation, Product Name = Canon MF, Product version = 1.20, Company name = Canon Inc. (Copyright (C) 2004 Canon Inc.) |708775687|0xb6be495c76b79a97c97a6e802b5701d0|
	  C:\WINDOWS\system32\CNCLST12.DLL, MID = 920000,  ("c:\windows\system32\cnclst12.dll") File version = 1.20, File size = 110592, File modification date = 09/09/2004  18:01, File description =  Exposed API to the MFP TransPort, Product Name = Canon MF, Product version = 1.20, Company name = Canon Inc. (Copyright (C) 2004 Canon Inc.) |-1423516641|0x5585714812eee786dfd7ee66b266d786|
	  C:\WINDOWS\system32\Wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\ACTXPRXY.DLL, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|

	PROCESS	SOUNDMAN, PID = 1948, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\SOUNDMAN.EXE" 
		  "c:\windows\soundman.exe" File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
	  C:\WINDOWS\SOUNDMAN.EXE, MID = 400000,  ("c:\windows\soundman.exe") File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 30/08/2007  07:31, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|

	PROCESS	rundll32, PID = 1968, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
		  "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
		  "c:\windows\system32\bthprops.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110592, File modification date = 18/08/2004  12:00, File description = Bluetooth Control Panel Applet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-214052743|0x1eb382bf5dd399694b234e5bc5a3f158|
	  C:\WINDOWS\system32\rundll32.exe, MID = 1000000,  ("c:\windows\system32\rundll32.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\bthprops.cpl, MID = 4ff50000,  ("c:\windows\system32\bthprops.cpl") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110592, File modification date = 18/08/2004  12:00, File description = Bluetooth Control Panel Applet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-214052743|0x1eb382bf5dd399694b234e5bc5a3f158|
	  C:\WINDOWS\system32\DEVMGR.DLL, MID = 72a50000,  ("c:\windows\system32\devmgr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 284672, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-688161785|0xcd3408a2e96d199ef2ebd66fffbf83e5|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|

	PROCESS	ctfmon, PID = 1992, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\ctfmon.exe" 
		  "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ctfmon.exe, MID = 400000,  ("c:\windows\system32\ctfmon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|
	  C:\WINDOWS\system32\MSUTB.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 18/08/2004  12:00, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|

	PROCESS	wmiprvse, PID = 1904, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\wbem\wmiprvse.exe -Embedding
		  "c:\windows\system32\wbem\wmiprvse.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\wbem\wmiprvse.exe, MID = 1000000,  ("c:\windows\system32\wbem\wmiprvse.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\wmiprov.dll, MID = 72ee0000,  ("c:\windows\system32\wbem\wmiprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144896, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |723827086|0x2e5321f4bf9c94be2daa1e4aefe83580|
	  C:\WINDOWS\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|

	PROCESS	alg, PID = 2000, USER = , Command Line = C:\WINDOWS\System32\alg.exe
		  "c:\windows\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	  C:\WINDOWS\System32\alg.exe, MID = 1000000,  ("c:\windows\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\System32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\System32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\System32\MSWSOCK.DLL, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	IEXPLORE, PID = 3568, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\internet explorer\iexplore.exe"
		  "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 625152, File modification date = 17/08/2007  20:07, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1800421887|0xbd8502dfd53fc24fb8d6929dc46b8c2c|
	  C:\Program Files\internet explorer\iexplore.exe, MID = 400000,  ("c:\program files\internet explorer\iexplore.exe") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 625152, File modification date = 17/08/2007  20:07, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1800421887|0xbd8502dfd53fc24fb8d6929dc46b8c2c|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 1154048, File modification date = 17/08/2007  20:07, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |917758552|0x433493c74172ca5f931caa87c577f20f|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 267776, File modification date = 15/08/2007  05:37, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1828061250|0x84e077c88627829a97c156c3b4179009|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\IEFRAME.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\IEUI.dll, MID = 5dff0000,  ("c:\windows\system32\ieui.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 180736, File modification date = 20/06/2007  06:49, File description = Internet Explorer UI Engine, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1597583758|0x28f5b835472a62b13ad54663c645191d|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 18/08/2004  12:00, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 18/08/2004  12:00, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\system32\xmllite.dll, MID = 47200000,  ("c:\windows\system32\xmllite.dll") File version = 1.00.1018.0, File size = 121856, File modification date = 02/10/2006  12:35, File description = Microsoft XmlLite Library, Product Name = Microsoft XML Core Services, Product version = 1.00.1018.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 2005) |-1541118958|0x8f845c8edac6e5badd13bec3fe47b2f0|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\msimtf.dll, MID = 746b0000,  ("c:\windows\system32\msimtf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 159232, File modification date = 18/08/2004  12:00, File description = Active IMM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |620728644|0xd942ba5f14c7b0089d1967941e6a697b|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\mslbui.dll, MID = 60af0000,  ("c:\windows\system32\mslbui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 18/08/2004  12:00, File description =  LangageBar, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2097516122|0x678a1c69ef9c04112d0f77d2f810742a|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  03:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\WINDOWS\ime\sptip.dll, MID = 5c7c0000,  ("c:\windows\ime\sptip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 272384, File modification date = 18/08/2004  12:00, File description =  (DLL)  SAPI5.0/CTF, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1444165217|0xd7fe0cadde1f62654445dda4fa47139f|
	  C:\WINDOWS\system32\OLEACC.dll, MID = 74c40000,  ("c:\windows\system32\oleacc.dll") File version = 4.2.5406.0 (xpclient.010817-1148), File size = 163328, File modification date = 18/08/2004  12:00, File description = Active Accessibility Core Component, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1133819602|0x38217599cf49d4f8ebd3cec5894ed0c9|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\IME\SPGRMR.DLL, MID = 1390000,  ("c:\windows\ime\spgrmr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 62976, File modification date = 18/08/2004  12:00, File description = SPTIP Grammar DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1119193783|0x88ad1bd1f9fa0f3258d9aa49ea7777a2|
	  C:\Program Files\Internet Explorer\ieproxy.dll, MID = 61930000,  ("c:\program files\internet explorer\ieproxy.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 287744, File modification date = 20/06/2007  10:59, File description = IE ActiveX Interface Marshaling Library, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |506737445|0xca9b8fb2015266f22368b006bcc69990|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp.061019-0442), File size = 714240, File modification date = 30/08/2007  07:30, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |-921447871|0x2784682e37d70e4cd7af1091d481af23|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 824320, File modification date = 17/08/2007  20:07, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2123309618|0xd0fabf826aa178fe25e08bf4912d128c|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 14d0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 20/06/2007  06:49, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2530 (xpsp.040919-1030), File size = 586240, File modification date = 30/08/2007  07:29, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2530, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1833561173|0xdda367030f9cd794b734a1d8a58b3d36|
	  C:\WINDOWS\system32\ws2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, MID = 10000000,  ("c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll") File version = 9.0.0.2008061100, File size = 75128, File modification date = 11/06/2008  20:33, File description = Adobe PDF Helper for Internet Explorer, Product Name = AcroIEHelperShim Library, Product version = 9.0.0.2008061100, Company name = Adobe Systems Incorporated (Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.) |-438886269|0xe96c752bba0e22330a43258fc800200e|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll, MID = 78130000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll") File version = 8.00.50727.762, File size = 626688, File modification date = 01/12/2006  19:54, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |412186895|0xe4fece18310e23b1d8fee993e35e7a6f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll") File version = 8.00.50727.762, File size = 548864, File modification date = 01/12/2006  19:54, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1359536405|0x4c8a880eabc0b4d462cc4b2472116ea1|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, MID = 1d40000,  ("c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll") File version = 9.0.0.2008061100, File size = 61816, File modification date = 11/06/2008  20:33, File description = Adobe PDF Helper for Internet Explorer, Product Name = AcroIEHelper Library, Product version = 9.0.0.2008061100, Company name = Adobe Systems Incorporated (Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.) |-1327524755|0x648ab52693d42c015d6062583b48d786|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll, MID = 6d490000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll") File version = 8.0.0.454, File size = 62728, File modification date = 29/07/2008  18:21, File description = IE Virtual Keyboard, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |1922143641|0xf09ee70d53cd3c336375d363191bba76|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 18/08/2004  12:00, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  12:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\ACTXPRXY.DLL, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 7680, File modification date = 30/08/2007  07:30, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1058593106|0xf05832bb22814eccee31c8f927206095|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\mshtml.dll, MID = 43cd0000,  ("c:\windows\system32\mshtml.dll") File version = 7.00.6000.20641 (vista_ldr.070716-1600), File size = 3584000, File modification date = 18/07/2007  20:58, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20641, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |785863635|0x717925b1664d747bc011775d4f7acb3d|
	  C:\WINDOWS\system32\msls31.dll, MID = 1e60000,  ("c:\windows\system32\msls31.dll") File version = 3.10.349.0, File size = 156160, File modification date = 17/08/2007  20:07, File description = Microsoft Line Services library file, Product Name = Microsoft Line Services, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1999) |-245357016|0x2d15e1c7cd0bc1a9b7f9660e39a0ce3e|
	  C:\WINDOWS\system32\ieapfltr.dll, MID = 43c60000,  ("c:\windows\system32\ieapfltr.dll") File version = 7.0.6000.16461, File size = 383488, File modification date = 15/08/2007  05:36, File description = Microsoft Phishing Filter, Product Name = Windows Internet Explorer, Product version = 7.0.6000.16461, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-909471872|0xb6526a99e2a95c099886666e1f3aca9b|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\scrchpg.dll, MID = 6d8e0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\scrchpg.dll") File version = 8.0.0.454, File size = 152840, File modification date = 29/07/2008  18:22, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1716262527|0xd5110fcf803ca651419060747f70039a|
	  C:\WINDOWS\system32\jscript.dll, MID = 63380000,  ("c:\windows\system32\jscript.dll") File version = 5.7.0.5730, File size = 491520, File modification date = 17/08/2007  20:07, File description = Microsoft (R) JScript, Product Name = Microsoft (R) JScript, Product version = 5.7.0.5730, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-433185843|0x194d61a029411cc83011181d6e818600|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\klscav.dll, MID = 6d510000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\klscav.dll") File version = 8.0.0.454, File size = 33032, File modification date = 29/07/2008  18:21, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-994789934|0x001cc2589216d99563db7330447a9ca7|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\prremote.dll, MID = 6d860000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\prremote.dll") File version = 8.0.0.454, File size = 91400, File modification date = 29/07/2008  18:22, File description = PR_REMOTE, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |123983607|0x8822be376bbbf30b68319d52bb9272e9|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\prloader.dll, MID = 6d810000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\prloader.dll") File version = 8.0.0.454, File size = 263432, File modification date = 29/07/2008  18:22, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1854228284|0xac5a4b481fb77fe017b56f352f6bd7bc|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\prkernel.ppl, MID = 6e360000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\prkernel.ppl") File version = 8.0.0.454, File size = 152840, File modification date = 29/07/2008  18:25, File description = Prague kernel, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-543640795|0xff39c19572b25fe5a5a17c6045e24406|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\params.ppl, MID = 6e240000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\params.ppl") File version = 8.0.0.454, File size = 505096, File modification date = 29/07/2008  18:25, File description = Structure Serializer, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |958615128|0xc35a1b16b1ad09ccf393071931410912|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\pxstub.ppl, MID = 6e4b0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\pxstub.ppl") File version = 8.0.0.454, File size = 29448, File modification date = 29/07/2008  18:25, File description = Proxy Stubs, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |1439350860|0x00a21c84234b1aaf5cad86080811676e|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\tempfile.ppl, MID = 6e680000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\tempfile.ppl") File version = 8.0.0.454, File size = 14088, File modification date = 29/07/2008  18:26, File description = Temporary IO, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1764812785|0x5069b71390530d886f91f877aef34683|
	  C:\WINDOWS\system32\Dxtrans.dll, MID = 35c50000,  ("c:\windows\system32\dxtrans.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 214528, File modification date = 17/08/2007  20:07, File description = DirectX Media -- DirectX Transform Core, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |659544437|0xeec89d7bf84cb8c3129ae2bdf30ab5ff|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\ddrawex.dll, MID = 6d9c0000,  ("c:\windows\system32\ddrawex.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27136, File modification date = 18/08/2004  12:00, File description = Direct Draw Ex, Product Name = Microsoft Windows Operating System, Product version = 5.03.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-541135331|0x0fae8c70918c7450307c285655ad8f19|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 18/08/2004  12:00, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 18/08/2004  12:00, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\nfio.ppl, MID = 6e1d0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\nfio.ppl") File version = 8.0.0.454, File size = 87304, File modification date = 29/07/2008  18:25, File description = NFIO, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1333008714|0xe52018a2c381a6e31b0583c658b2354c|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\fsdrvplg.ppl, MID = 6dee0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\fsdrvplg.ppl") File version = 8.0.0.454, File size = 15112, File modification date = 29/07/2008  18:24, File description = Plugin for FSDrv, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1794634975|0xd009f164453eb5606901ac09f8864509|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\fssync.dll, MID = 6d440000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\fssync.dll") File version = 8.0.5.454, File size = 44808, File modification date = 29/07/2008  18:21, File description = FSSYNC.DLL, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1174783532|0x018843c1299b8cfdeac98b2ebb11c500|
	  C:\WINDOWS\system32\FLTLIB.DLL, MID = 4dd70000,  ("c:\windows\system32\fltlib.dll") File version = 5.1.2600.2978 (xpsp.060821-0047), File size = 16896, File modification date = 30/08/2007  07:29, File description = Filter Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |441711977|0x0c45bbbd55195d77358c42dd4e9b6ce0|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\basegui.ppl, MID = 6dca0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\basegui.ppl") File version = 8.0.0.454, File size = 1225992, File modification date = 29/07/2008  18:23, File description = Kaspersky Anti-Virus GUI Windows part, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |896619740|0xce47f188e300c31df5023068a4fa2cc6|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\thpimpl.ppl, MID = 6e690000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\thpimpl.ppl") File version = 8.0.0.454, File size = 25352, File modification date = 29/07/2008  18:26, File description = Thread Pool, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2030775919|0xbf1a46c66a473f5f2094d332b7fc43da|
	  c:\program files\kaspersky lab\kaspersky internet security 2009\winreg.ppl, MID = 6e8c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\winreg.ppl") File version = 8.0.0.454, File size = 32008, File modification date = 29/07/2008  18:27, File description = WINREG, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-586286066|0xe73c4ee7f6213ee72842a1a9c2ff6657|
	  C:\WINDOWS\system32\USP10.dll, MID = 75540000,  ("c:\windows\system32\usp10.dll") File version = 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 406528, File modification date = 18/08/2004  12:00, File description = Uniscribe Unicode script processor, Product Name = Microsoft(R) Uniscribe Unicode script processor, Product version = 1.0420.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1714559367|0xf723f8b36e97e27a4794b4ed105de1dd|
	  C:\WINDOWS\system32\Dxtmsft.dll, MID = 35cb0000,  ("c:\windows\system32\dxtmsft.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 346624, File modification date = 17/08/2007  20:07, File description = DirectX Media -- Image DirectX Transforms, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1981180745|0x8f4aaabeb926a294559c8a884a88a04e|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\ImgUtil.dll, MID = 1b000000,  ("c:\windows\system32\imgutil.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 36352, File modification date = 17/10/2006  07:57, File description = IE plugin image decoder support DLL, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |561105050|0xc2d6a721edf79456b0e74faff6713026|
	  C:\WINDOWS\system32\pngfilt.dll, MID = 1b060000,  ("c:\windows\system32\pngfilt.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 44544, File modification date = 17/10/2006  07:58, File description = IE PNG plugin image decoder, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2121191923|0xeba6e877b64fdf40f65256f29a103a69|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, MID = 30000000,  ("c:\windows\system32\macromed\flash\flash9d.ocx") File version = 9,0,47,0, File size = 2267368, File modification date = 17/08/2007  20:07, File description = Adobe Flash Player 9.0  r46, Product Name = Shockwave Flash, Product version = 9,0,47,0, Company name = Adobe Systems, Inc. (Adobe Flash Player. Copyright  1996-2007 Adobe Systems Incorporated. All Rights Reserved. Protected by U.S. Patent 6,879,327; Patents Pending in the United States and other countries. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.) |-1988053268|0xb01e2a41389fba42b7b5a026ea88c9b7|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mshtmled.dll, MID = 43290000,  ("c:\windows\system32\mshtmled.dll") File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 477696, File modification date = 17/08/2007  20:07, File description = Microsoft HTML Editing Component, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2069042036|0xa74b2135d6c9e80c10fbc2f3af24e181|
	  C:\WINDOWS\system32\vbscript.dll, MID = 73300000,  ("c:\windows\system32\vbscript.dll") File version = 5.7.0.5730, File size = 413696, File modification date = 17/08/2007  20:07, File description = Microsoft (R) VBScript, Product Name = Microsoft (R) VBScript, Product version = 5.7.0.5730, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-508925781|0x767d22c6e47a4d73ae0253b83bc7be64|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_qfe.070425-0226), File size = 144896, File modification date = 30/08/2007  07:30, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829972792|0xaa2a6017637279c153886c720120d5a1|

	PROCESS	wuauclt, PID = 3700, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\WINDOWS\system32\wuauclt.exe" /RunStoreAsComServer Local\[35c]SUSDSee70c30a7ab8d942839038e78e66c861
		  "c:\windows\system32\wuauclt.exe" File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 53080, File modification date = 30/08/2007  07:30, File description = Windows Update Automatic Updates, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2078586079|0xf3e9065eb617a7e3a832a7976bfa021b|
	  C:\WINDOWS\system32\wuauclt.exe, MID = 400000,  ("c:\windows\system32\wuauclt.exe") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 53080, File modification date = 30/08/2007  07:30, File description = Windows Update Automatic Updates, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2078586079|0xf3e9065eb617a7e3a832a7976bfa021b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.3163 (xpsp_sp2_qfe.070625-1304), File size = 1852928, File modification date = 30/08/2007  07:29, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3163, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1463317242|0xfdfdb5efc6f9c90cc3a2446bc79bd330|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 1712984, File modification date = 30/08/2007  07:30, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |567071557|0x3eec20e41f5f331b94002970ceaec92f|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 30/08/2007  07:29, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1194219110|0x495519ae53384ce333aad8394e991f92|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\IPHLPAPI.DLL, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\wups2.dll, MID = 50e60000,  ("c:\windows\system32\wups2.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 43352, File modification date = 27/08/2007  09:16, File description = Windows Update client proxy stub 2, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |760780347|0xceb1bd87fbcb5984bdf7dc0991a060b5|

	PROCESS	GetSystemInfo, PID = 1044, USER = HOME\Alexander (Group - HOME\, , BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Documents and Settings\Alexander\ \GetSystemInfo.exe" 
		  "c:\documents and settings\alexander\ \getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 28/01/2009  09:57, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\Documents and Settings\Alexander\ \GetSystemInfo.exe, MID = 400000,  ("c:\documents and settings\alexander\ \getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 28/01/2009  09:57, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_qfe.070416-1259), File size = 992256, File modification date = 30/08/2007  07:29, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |-975855247|0x386376d4516f7922c5afe1752b6ded84|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_qfe.070308-0217), File size = 578560, File modification date = 30/08/2007  07:30, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-309379473|0x037e2ac14b8a7e7673175fbde6602d7a|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_qfe.070619-1301), File size = 282112, File modification date = 30/08/2007  07:29, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585867667|0x9e637040af72fac54b47080fd128f908|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.3085 (xpsp_sp2_qfe.070216-0020), File size = 343040, File modification date = 30/08/2007  07:29, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.3085, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1553652760|0xccbe81cb63f52e44f86c31a0155b037d|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2794 (xpsp.051110-1543), File size = 582144, File modification date = 30/08/2007  07:30, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2794, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |119248785|0x141ed793b10a37e91aa21f7a534037b1|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 30/08/2007  07:29, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  04:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\Msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 30/08/2007  07:29, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702017894|0x667c53f0b02416b9f2ef0f240dccc3b8|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2845 (xpsp.060210-1526), File size = 219648, File modification date = 14/10/2006  20:38, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2845, Company name =   (  .   .) |618644163|0xbd3c4cf5a41ed10e81b2ee567ac7cb34|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2575 (xpsp.041130-1728), File size = 297472, File modification date = 30/08/2007  07:29, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2575, Company name =   (  .   .) |182945276|0x55a3ed3b07481f8ec40c20b3c768083a|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 1286144, File modification date = 30/08/2007  07:29, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2846, Company name =   (  .   .) |-1002010392|0x35263ab8d6b660b54cef328635f238ab|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.310, File size = 498688, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1225331069|0x1c7900c5ea1a2a07259932db0feb6bfa|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549888, File modification date = 30/08/2007  07:29, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-1164981769|0x9fbf05669c32b01fb37c897f5737c107|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 337408, File modification date = 30/08/2007  07:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1484378098|0xa73704014ebd4061f9cf93aa5ad66be4|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2530 (xpsp.040919-1030), File size = 586240, File modification date = 30/08/2007  07:29, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2530, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1833561173|0xdda367030f9cd794b734a1d8a58b3d36|
	  C:\WINDOWS\system32\mslbui.dll, MID = 60af0000,  ("c:\windows\system32\mslbui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 18/08/2004  12:00, File description =  LangageBar, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2097516122|0x678a1c69ef9c04112d0f77d2f810742a|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp.050831-1531), File size = 19968, File modification date = 30/08/2007  07:29, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2099116578|0xb489faa0105744beb96594e2974dcf69|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp.060626-0041), File size = 147456, File modification date = 30/08/2007  07:29, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356878314|0x6920b19c4a142670502c38914b0c58db|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 95744, File modification date = 30/08/2007  07:29, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-538540421|0x6510051cc5a285e3683de02d642d1542|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5ec70000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35328, File modification date = 18/08/2004  12:00, File description =      Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2042794600|0x025455ca4a1027345d9ae0a527669874|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):HOME/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 816, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	TCP, LOCAL (host/address/port):HOME/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):HOME/0.0.0.0/47544, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1340, Command Line = c:\windows\system32\spoolsv.exe   "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp.050610-1527), File size = 57856, File modification date = 30/08/2007  07:30, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1793708297|0xad3d9d191aea7b5445fe1d82ffbb4788|
	TCP, LOCAL (host/address/port):HOME/93.72.127.94/139(netbios-ssn), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):HOME/127.0.0.1/1033, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 2000, Command Line = c:\windows\system32\alg.exe   "c:\windows\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	UDP, LOCAL (host/address/port):HOME/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):HOME/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 576, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):HOME/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 576, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):HOME/93.72.127.94/123, REMOTE (host/address/port):*/*/*, State:*, PID = 860, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):HOME/93.72.127.94/137(netbios-ns), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):HOME/93.72.127.94/138, REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):HOME/93.72.127.94/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1260, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):HOME/127.0.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 860, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):HOME/127.0.0.1/1050, REMOTE (host/address/port):*/*/*, State:*, PID = 3568, Command Line = "c:\program files\internet explorer\iexplore.exe"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 625152, File modification date = 17/08/2007  20:07, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1800421887|0xbd8502dfd53fc24fb8d6929dc46b8c2c|
	UDP, LOCAL (host/address/port):HOME/127.0.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1260, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|

System default language:
		Russian

Default interface language of user:
		Russian

Keyboard layout languages:
		English
		Russian
		Ukrainian

Installed code pages:
		10000 = 10000 (MAC - )
		10006 = 10006 (MAC -  1)
		10007 = 10007 (MAC - )
		10010 = 10010 (MAC - )
		10017 = 10017 (MAC - )
		10029 = 10029 (MAC -  2)
		10079 = 10079 (MAC - )
		10081 = 10081 (MAC - )
		10082 = 10082 (MAC - )
		1026 = 1026 (IBM EBCDIC -  (-5))
		1250 = 1250  (ANSI - -)
		1251 = 1251  (ANSI - )
		1252 = 1252  (ANSI -  1)
		1253 = 1251  (ANSI - )
		1254 = 1254  (ANSI - )
		1255 = 1255  (ANSI - )
		1256 = 1256  (ANSI - )
		1257 = 1257  (ANSI - )
		1258 = 1258  (ANSI/OEM - )
		1361 = Korean (Johab)
		20127 = 20127 (-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 ( - 8)
		21866 = 21866 ( - 8-U)
		28591 = 28591 (ISO 8859-1  1)
		28592 = 28592 (ISO 8859-2 )
		28594 = 28594 (ISO 8859-4 )
		28595 = 28595 (ISO 8859-5 )
		28597 = 28597 (ISO 8859-7 )
		28599 = 28599 (ISO 8859-9  5)
		28605 = 28605 (ISO 8859-15  9)
		37 = 37    (IBM EBCDIC -   )
		437 = 437   (OEM - )
		500 = 500   (IBM EBCDIC - )
		737 = 737   (OEM -  437G)
		775 = 775   (OEM - )
		850 = 850   (OEM -   1)
		852 = 852   (OEM -  2)
		855 = 855   (OEM -  )
		857 = 857   (OEM - )
		860 = 860   (OEM - )
		861 = 861   (OEM - )
		863 = 863   (OEM - -)
		865 = 865   (OEM - )
		866 = 866   (OEM - )
		869 = 869   (OEM -  )
		874 = 874   (ANSI/OEM - )
		875 = 875   (IBM EBCDIC -  )
		932 = 932   (ANSI/OEM -  Shift-JIS)
		936 = 936   (ANSI/OEM -   GBK)
		949 = 949   (ANSI/OEM - )
		950 = 950   (ANSI/OEM -   Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 46080, File modification date = 18/08/2004  12:00, File description =  DrWatson, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |540897299|0x6a32ea2baff29f3624d841da20f67e28|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311), File size = 1033728, File modification date = 30/08/2007  07:29, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-581932639|0xa1bfbe52e8865c5641ac6eb1cee8db26|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =  Userinit    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1110865795|0xb5f1a73edab83fa2db9662e10e027587|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=Ati2evxx.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent>
      "c:\windows\system32\ati2evxx.dll" File version = 6.14.10.4132, File size = 61440, File modification date = 03/05/2006  16:44, File description = ATI External Event Utility DLL Module, Product Name = ATI External Event Utility for NT, W2K and W9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |1169062802|0x0dc29a1fa52d445db14ddf16e272e6d1|
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 18/08/2004  12:00, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
    DllName=C:\WINDOWS\system32\klogon.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon>
      "c:\windows\system32\klogon.dll" File version = 8.0.0.454, File size = 218376, File modification date = 29/07/2008  18:21, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |101864652|0x1fe46082a766cebe72ff30d0de7ddcd1|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 22016, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1015048368|0x017f95e7e577b928827add784b2ca052|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    SoundMan=SOUNDMAN.EXE <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\soundman.exe" File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
    NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\nokia\nokia software launcher\nslauncher.exe" File version = 1.1.223.0, File size = 2658304, File modification date = 27/11/2006  22:12, File description = Nokia Software Launcher, Product Name = Nokia Software Launcher, Product version = 1.1.223.0, Company name =  2006 Nokia Corporation. All rights reserved. |-858655983|0x735df7e5599269dfa3fa0202d30eecfa|
    BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\bthprops.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110592, File modification date = 18/08/2004  12:00, File description = Bluetooth Control Panel Applet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-214052743|0x1eb382bf5dd399694b234e5bc5a3f158|
    AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.454, File size = 206088, File modification date = 29/07/2008  18:20, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1672052235|0x56046d59e299969544255196afaaa377|
    Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\adobe\reader 9.0\reader\reader_sl.exe" File version = 9.0.0.2008061200, File size = 34672, File modification date = 12/06/2008  00:38, File description = Adobe Acrobat SpeedLauncher, Product Name = Adobe Acrobat, Product version = 9.0.0.2008061200, Company name = Adobe Systems Incorporated (Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.) |-78942103|0x69b16c7b7746ba5c642fc05b3561fc73|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    IE7_011=regsvr32 /s /n /i:u shell32 <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
    IE7_012=rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 124928, File modification date = 17/08/2007  20:07, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1452444986|0x59ecf3d6b3db28fdde233eeb6cb6b8e1|
    IE7_013=rebuild.exe <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce>
      "c:\windows\system32\rebuild.exe" File version = Version of a file 6.1 build 170, File size = 80905, File modification date = 05/07/2007  07:15, File description = 7z SFX archive tool, Product Name = Button TC #6, Product version = Version of a product 6.1, Company name = Company 'oszone.net' (What rights are not present (while?)) |1931174115|0xf3bc32881140480b5f483d2a3c9bde80|
    ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe <HKEY_USERS\S-1-5-21-1078081533-1343024091-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    NBJ="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" <HKEY_USERS\S-1-5-21-1078081533-1343024091-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\ahead\nero backitup\nbj.exe" File version = 1, 2, 0, 43, File size = 1937408, File modification date = 10/02/2005  14:00, File description = Nero BackItUp Scheduler Application, Product Name = Nero BackItUp Scheduler, Product version = 1, 2, 0, 43, Company name = Ahead Software AG (Copyright (c) 1995-2005 Ahead Software and its licensors) |988043683|0x237b1c2925d7011ab67068d3cc63a5e1|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    IE7_013=rebuild.exe <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce>
      "c:\windows\system32\rebuild.exe" File version = Version of a file 6.1 build 170, File size = 80905, File modification date = 05/07/2007  07:15, File description = 7z SFX archive tool, Product Name = Button TC #6, Product version = Version of a product 6.1, Company name = Company 'oszone.net' (What rights are not present (while?)) |1931174115|0xf3bc32881140480b5f483d2a3c9bde80|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet001\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.7.2600.3143 (xpsp_sp2_qfe.070524-0110), File size = 408064, File modification date = 30/08/2007  07:29, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.7.2600.3143, Company name =   (  .   .) |-581935385|0x4bf41f76e468202a30d1e965ee9851cb|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\bthserv.dll <HKLM\System\ControlSet001\Services\BthServ\Parameters>
      "c:\windows\system32\bthserv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Bluetooth Support Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1234028331|0xe70ea8bab71fc7c56615cf68589662b5|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 111616, File modification date = 30/08/2007  07:29, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-813523932|0x4e65d2c8c85bd103b532c682cd7b0a95|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.310, File size = 243200, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-872367420|0x5c41d9f18ab39c703de13ce02982ef25|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  12:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp.041130-1728), File size = 96768, File modification date = 30/08/2007  07:30, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |527826292|0xab340e995ce348694d97cadd6eb969c1|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 132096, File modification date = 30/08/2007  07:30, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-839842849|0x8d2b608fcbf35d26558aece5047bdc60|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp.050819-1528), File size = 197632, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1878580285|0xadeaa9ab29e4f529bb7e6f036d35fc7b|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  12:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp.060621-2356), File size = 180736, File modification date = 30/08/2007  07:30, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1141207705|0x906b4a6b66d05ad9a7a9bf312ce31348|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet001\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_qfe.061219-0311), File size = 333824, File modification date = 30/08/2007  07:30, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |1127711379|0x5b49a3c13906fafacd2cb055a0c9c70a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp.050707-1657), File size = 249344, File modification date = 30/08/2007  07:30, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |468930062|0x56a6eeb68ec3ae46b80bd0464f7ba023|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_qfe.070205-0007), File size = 185344, File modification date = 30/08/2007  07:30, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |-1679646430|0x6f9cef720bf7559ae72411221efecb2f|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp.060103-1543), File size = 68096, File modification date = 30/08/2007  07:30, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |84805698|0x92ec063a21152466e754e4d1cb2af302|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 18/10/2006  17:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet001\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 7.0.6000.374 (winmain(wmbla).070416-2057), File size = 25944, File modification date = 30/08/2007  07:30, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.374, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1438381568|0x365980da5b43b397542429b0743e6226|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet001\Services\WudfSvc\Parameters>
      "c:\windows\system32\wudfsvc.dll" File version = 6.0.5730.0 (winmain.060915-1845), File size = 55296, File modification date = 15/09/2006  21:30, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2058699194|0xae93084d2d236887ba56467ae42b4955|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 476160, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |710790892|0xdee39d73aad0e322821efe0a8b1fd0f7|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet002\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.7.2600.3143 (xpsp_sp2_qfe.070524-0110), File size = 408064, File modification date = 30/08/2007  07:29, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.7.2600.3143, Company name =   (  .   .) |-581935385|0x4bf41f76e468202a30d1e965ee9851cb|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\bthserv.dll <HKLM\System\ControlSet002\Services\BthServ\Parameters>
      "c:\windows\system32\bthserv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Bluetooth Support Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1234028331|0xe70ea8bab71fc7c56615cf68589662b5|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp.060519-0015), File size = 111616, File modification date = 30/08/2007  07:29, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-813523932|0x4e65d2c8c85bd103b532c682cd7b0a95|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.310, File size = 243200, File modification date = 30/08/2007  07:29, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-872367420|0x5c41d9f18ab39c703de13ce02982ef25|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  12:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp.041130-1728), File size = 96768, File modification date = 30/08/2007  07:30, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |527826292|0xab340e995ce348694d97cadd6eb969c1|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp.060817-0113), File size = 132096, File modification date = 30/08/2007  07:30, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-839842849|0x8d2b608fcbf35d26558aece5047bdc60|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp.050819-1528), File size = 197632, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1878580285|0xadeaa9ab29e4f529bb7e6f036d35fc7b|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  12:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp.060621-2356), File size = 180736, File modification date = 30/08/2007  07:30, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1141207705|0x906b4a6b66d05ad9a7a9bf312ce31348|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet002\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_qfe.061219-0311), File size = 333824, File modification date = 30/08/2007  07:30, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |1127711379|0x5b49a3c13906fafacd2cb055a0c9c70a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp.050707-1657), File size = 249344, File modification date = 30/08/2007  07:30, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |468930062|0x56a6eeb68ec3ae46b80bd0464f7ba023|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 135680, File modification date = 30/08/2007  07:30, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |907063218|0x5d9cee931c5686a62cde9a218ecbc80b|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_qfe.070205-0007), File size = 185344, File modification date = 30/08/2007  07:30, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |-1679646430|0x6f9cef720bf7559ae72411221efecb2f|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp.060103-1543), File size = 68096, File modification date = 30/08/2007  07:30, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |84805698|0x92ec063a21152466e754e4d1cb2af302|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 18/10/2006  17:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet002\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 7.0.6000.374 (winmain(wmbla).070416-2057), File size = 25944, File modification date = 30/08/2007  07:30, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.374, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1438381568|0x365980da5b43b397542429b0743e6226|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet002\Services\WudfSvc\Parameters>
      "c:\windows\system32\wudfsvc.dll" File version = 6.0.5730.0 (winmain.060915-1845), File size = 55296, File modification date = 15/09/2006  21:30, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2058699194|0xae93084d2d236887ba56467ae42b4955|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 476160, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |710790892|0xdee39d73aad0e322821efe0a8b1fd0f7|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet001\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet001\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet001\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 29896, File modification date = 23/09/2005  05:28, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2121340652|0xd33c507942299753868204cc7642fa27|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=%SystemRoot%\system32\Ati2evxx.exe <HKLM\System\ControlSet001\Services\Ati HotKey Poller>
      "C:\WINDOWS\system32\ati2evxx.exe" File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
    ImagePath=C:\WINDOWS\system32\ati2sgag.exe <HKLM\System\ControlSet001\Services\ATI Smart>
      "c:\windows\system32\ati2sgag.exe" File version = 5.13.0025, File size = 520192, File modification date = 03/05/2006  07:57, File description = ATI Smart, Product Name = ATI Smart, Product version = 5.13.0025, Company name =  (Copyright (C) 1998 - 2006 ATI Technologies Inc.) |1058664508|0x312a17dff710a0f4e6d4dd1d52ead1a8|
    ImagePath=system32\DRIVERS\ati2mtag.sys <HKLM\System\ControlSet001\Services\ati2mtag>
      "c:\windows\system32\drivers\ati2mtag.sys" File version = 6.14.10.6614, File size = 1540608, File modification date = 03/05/2006  16:50, File description = ATI Radeon WindowsNT Miniport Driver, Product Name = ATI Radeon WindowsNT Miniport Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-328657474|0x492bd2a5f65f218d4ede5764a3bb67e9|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r <HKLM\System\ControlSet001\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.454, File size = 206088, File modification date = 29/07/2008  18:20, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1672052235|0x56046d59e299969544255196afaaa377|
    ImagePath=\??\C:\Documents and Settings\Alexander\ \BiTDefender 10\App\bdfdll.sys <HKLM\System\ControlSet001\Services\bdfdll>
      "\\?\c:\documents and settings\alexander\ \bitdefender 10\app\bdfdll.sys" File version = (null), File size = 8704, File modification date = 04/12/2006  12:51, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |244587866|0x4b8c4b37a298305af83676679329522b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\BthEnum.sys <HKLM\System\ControlSet001\Services\BthEnum>
      "c:\windows\system32\drivers\bthenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 03/08/2004  20:10, File description = Bluetooth Bus Extender, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |689063939|0xd24b8d1784c68a25060fffbe8ed34b76|
    ImagePath=system32\DRIVERS\bthmodem.sys <HKLM\System\ControlSet001\Services\BTHMODEM>
      "c:\windows\system32\drivers\bthmodem.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38016, File modification date = 03/08/2004  20:10, File description = Bluetooth Communications Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-119841680|0x9df0adf74ce1d6371ed60cf92eb1d9a6|
    ImagePath=system32\DRIVERS\bthpan.sys <HKLM\System\ControlSet001\Services\BthPan>
      "c:\windows\system32\drivers\bthpan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 100992, File modification date = 03/08/2004  19:58, File description = Bluetooth Personal Area Networking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273676637|0x10355270be12641b9764235da39dcf0f|
    ImagePath=System32\Drivers\BTHport.sys <HKLM\System\ControlSet001\Services\BTHPORT>
      "c:\windows\system32\drivers\bthport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 274688, File modification date = 17/08/2004  12:50, File description =   Bluetooth, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-1518874965|0xd818c59f9df3709f97384c0b6754f8bb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k bthsvcs <HKLM\System\ControlSet001\Services\BthServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=System32\Drivers\BTHUSB.sys <HKLM\System\ControlSet001\Services\BTHUSB>
      "c:\windows\system32\drivers\bthusb.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 03/08/2004  20:10, File description = Bluetooth Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1550493412|0xf06d4cb9918b462a84d9ac00027efc30|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet001\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  05:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  12:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet001\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath="C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" <HKLM\System\ControlSet001\Services\FLEXnet Licensing Service>
      "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" File version = 11.03.005, File size = 654848, File modification date = 19/10/2008  21:24, File description = Activation Licensing Service, Product Name = FLEXnet Publisher (32 bit), Product version = (null), Company name = Macrovision Europe Ltd. (Copyright 2005-2006, Macrovision Europe Ltd. All rights reserved.) |-194064634|0x227846995afeefa70d328bf5334a86a5|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet001\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp.060821-0047), File size = 128768, File modification date = 30/08/2007  07:29, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-603269590|0x5a85cd3d07273e3f6fe72ee9c6431632|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\gameenum.sys <HKLM\System\ControlSet001\Services\gameenum>
      "c:\windows\system32\drivers\gameenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 10624, File modification date = 03/08/2004  23:08, File description = Game Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1413550789|0x5f92fd09e5610a5995da7d775eadcd12|
    ImagePath=System32\DRIVERS\gmer.sys <HKLM\System\ControlSet001\Services\gmer>
      "c:\windows\system32\drivers\gmer.sys" File version = 1, 0, 14, 4401, File size = 85969, File modification date = 27/01/2009  13:11, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet001\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp.060316-1523), File size = 262656, File modification date = 30/08/2007  07:29, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2059224107|0x909d110c9634b0f1487eaaea837317d9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet001\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2887 (xpsp.060413-1533), File size = 136320, File modification date = 30/08/2007  07:29, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2887, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-658852528|0x472c75f85e631f8aa87d21c9fee6238d|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet001\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  16:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
    ImagePath=system32\drivers\klbg.sys <HKLM\System\ControlSet001\Services\klbg>
      "c:\windows\system32\drivers\klbg.sys" File version = 8.0.6.2, File size = 32784, File modification date = 29/01/2008  16:29, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1602996343|0x1fdd35aa7efaeb283198a3b14800f37e|
    ImagePath=system32\DRIVERS\klfltdev.sys <HKLM\System\ControlSet001\Services\KLFLTDEV>
      "c:\windows\system32\drivers\klfltdev.sys" File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  17:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
    ImagePath=system32\DRIVERS\klif.sys <HKLM\System\ControlSet001\Services\KLIF>
      "c:\windows\system32\drivers\klif.sys" File version = 8.1.0.100, File size = 213008, File modification date = 30/10/2008  09:23, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |751176906|0x266d62d1c999ca82586be43ec3a87adb|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet001\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  16:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 172416, File modification date = 14/06/2006  08:50, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1130552819|0x8531438246ce9474e41ee1599904c0c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  12:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2934 (xpsp.060620-0455), File size = 454656, File modification date = 30/08/2007  07:29, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2934, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-290306565|0x3ecc5f53a627b28a23aa7cc8c9376db4|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  12:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "C:\WINDOWS\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 30/08/2007  07:29, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 30/08/2007  07:31, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 14592, File modification date = 30/08/2007  07:31, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |840521658|0x5146c3d286e66c72328f6ce6e4d983a8|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\ccdcmb.sys <HKLM\System\ControlSet001\Services\nmwcd>
      "c:\windows\system32\drivers\ccdcmb.sys" File version = 7.1.18.28, File size = 17664, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |-318008148|0x9a908a9bb857c2cceb2907eb9dcaeb8b|
    ImagePath=system32\drivers\ccdcmbo.sys <HKLM\System\ControlSet001\Services\nmwcdc>
      "c:\windows\system32\drivers\ccdcmbo.sys" File version = 7.1.18.28, File size = 22016, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |92828695|0x68ec3ee2348e475ea62c66e6aafcfc9b|
    ImagePath=system32\drivers\nmwcdnsu.sys <HKLM\System\ControlSet001\Services\nmwcdnsu>
      "c:\windows\system32\drivers\nmwcdnsu.sys" File version = 6.85.6.18, File size = 138112, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |252079154|0xbe7fd9ca07e7d39f77c78ba5756930d9|
    ImagePath=system32\drivers\nmwcdnsuc.sys <HKLM\System\ControlSet001\Services\nmwcdnsuc>
      "c:\windows\system32\drivers\nmwcdnsuc.sys" File version = 6.85.6.18, File size = 8320, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |-1208730092|0x94651f5808d3328d28ef967a9e853b8f|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet001\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  17:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet001\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pccsmcfd.sys <HKLM\System\ControlSet001\Services\pccsmcfd>
      "c:\windows\system32\drivers\pccsmcfd.sys" File version = 7.0.0.0, File size = 18816, File modification date = 26/08/2008  07:26, File description = PCCS Mode Change Filter Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2006,2007,2008. Nokia. All rights reserved.) |-35912472|0xfd2041e9ba03db7764b2248f02475079|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp.060505-0047), File size = 174592, File modification date = 30/08/2007  07:30, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-479133167|0xed375ce745c42a14f10753f7022ecd6a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet001\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  12:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rfcomm.sys <HKLM\System\ControlSet001\Services\RFCOMM>
      "c:\windows\system32\drivers\rfcomm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59648, File modification date = 03/08/2004  20:10, File description = Bluetooth RFCOMM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-51295389|0x99c4b74981a1413f142a3903130088cb|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ImagePath=system32\DRIVERS\rspndr.sys <HKLM\System\ControlSet001\Services\rspndr>
      "c:\windows\system32\drivers\rspndr.sys" File version = 5.1.2600.3029 (xpsp_sp2_qfe.061107-2325), File size = 62336, File modification date = 04/12/2006  09:03, File description = Link-Layer Topology Responder Driver for NDIS 6, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3029, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1771733776|0x0e11b35e972796042044bc27ce13b065|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=system32\DRIVERS\RTL8139.SYS <HKLM\System\ControlSet001\Services\rtl8139>
      "c:\windows\system32\drivers\rtl8139.sys" File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet001\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet001\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath="C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" <HKLM\System\ControlSet001\Services\ServiceLayer>
      "c:\program files\pc connectivity solution\servicelayer.exe" File version = 7, 0, 110, 0, File size = 620544, File modification date = 11/11/2008  07:38, File description = ServiceLayer Module, Product Name = PC Connectivity Solution, Product version = 3.6, Company name = Nokia. (Copyright  2002-2008 Nokia. All Rights Reserved.) |153238598|0x3ec8de67b1c78c31e54c0f030e6bd7d5|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 6272, File modification date = 14/06/2006  08:50, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1000408079|0x9bb1dd670cb7505a90fc4e61d4aa8227|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp.050610-1527), File size = 57856, File modification date = 30/08/2007  07:30, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1793708297|0xad3d9d191aea7b5445fe1d82ffbb4788|
    ImagePath=System32\Drivers\sptd.sys <HKLM\System\ControlSet001\Services\sptd>
      "c:\windows\system32\drivers\sptd.sys" File version = (null), File size = 717296, File modification date = 20/10/2008  21:57, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |0|(null)|
    ImagePath=\SystemRoot\system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "C:\WINDOWS\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp.060814-0204), File size = 332928, File modification date = 30/08/2007  07:30, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2022443734|0x5230953c21c811b5fc1ff31ae2b48097|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 30/08/2007  07:31, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{6E52DD85-09C5-4772-8E90-12BB84125B92} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp.060420-0256), File size = 360576, File modification date = 14/10/2006  20:38, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2034869751|0xbb4d3a8e6f7eb1d370bc4ad27ab23368|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet001\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 18/08/2004  12:00, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_qfe.070423-0026), File size = 364160, File modification date = 30/08/2007  07:30, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-423551235|0x7b2170ee3d858ce8fbe503904cc9b663|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\usbser_lowerflt.sys <HKLM\System\ControlSet001\Services\upperdev>
      "c:\windows\system32\drivers\usbser_lowerflt.sys" File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |1297056653|0xa34560a5d516a2f5240180370866b99d|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet001\Services\usbccgp>
      "C:\WINDOWS\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 30208, File modification date = 30/08/2007  07:30, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1335945544|0xa45ea1550ea4b368c4fba7ca9d056bc9|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 59264, File modification date = 30/08/2007  07:30, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243434234|0x6d46b1f89134892a862ac56b00ac11fe|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet001\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet001\Services\usbscan>
      "C:\WINDOWS\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\drivers\usbser.sys <HKLM\System\ControlSet001\Services\usbser>
      "c:\windows\system32\drivers\usbser.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 03/08/2004  21:08, File description = USB Modem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938344023|0x49106ee29074e6a3d3ac9e24c6d791d8|
    ImagePath=system32\DRIVERS\usbser_lowerfltj.sys <HKLM\System\ControlSet001\Services\UsbserFilt>
      "c:\windows\system32\drivers\usbser_lowerfltj.sys" File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |-1292586759|0x6410eebd6e0427466812858ee84c8467|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet001\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 20608, File modification date = 30/08/2007  07:30, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1450715770|0x0ee1925590ba1abec14254d54d9870f4|
    ImagePath=system32\DRIVERS\usb8023.sys <HKLM\System\ControlSet001\Services\USB_RNDIS>
      "c:\windows\system32\drivers\usb8023.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12672, File modification date = 18/08/2004  12:00, File description = Remote NDIS USB Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-582984044|0xaf090265ec388bab320f1ff7e7a7d5ea|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\uzezmjy2.sys <HKLM\System\ControlSet001\Services\uzezmjy2>
      "\\?\c:\windows\system32\drivers\uzezmjy2.sys" File version = 1, 3, 0, 0, File size = 11264, File modification date = 28/01/2009  09:59, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |1171257163|0xd565ad44c6c4d934afad3ca4196b09aa|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=System32\Drivers\wdf01000.sys <HKLM\System\ControlSet001\Services\Wdf01000>
      "c:\windows\system32\drivers\wdf01000.sys" File version = 1.7.6001.0 (longhorn_rtm.080118-1840), File size = 503008, File modification date = 27/03/2008  14:27, File description = WDF Dynamic, Product Name = Microsoft Windows Operating System, Product version = 1.7.6001.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2088650301|0xbbcfeab7e871cddac2d397ee7fa91fdc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 82944, File modification date = 14/06/2006  09:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1519466349|0x0bfa8203b8148fb4e54bc212c41ce497|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  12:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet001\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 914944, File modification date = 02/11/2006  19:06, File description =      Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1210282667|0x30e4f162eb4a91026ae330f2146e6b9f|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet001\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet001\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5730.0 (winmain.060915-1845), File size = 76544, File modification date = 15/09/2006  20:29, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1919534869|0x50eb9e21963b4f06fd010d007d54351b|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet001\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5730.0 (winmain.060915-1845), File size = 82688, File modification date = 15/09/2006  20:30, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-352712397|0x6e209664bdea8a15b5e8e480d6c607c2|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet001\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet002\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet002\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 29896, File modification date = 23/09/2005  05:28, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2121340652|0xd33c507942299753868204cc7642fa27|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=%SystemRoot%\system32\Ati2evxx.exe <HKLM\System\ControlSet002\Services\Ati HotKey Poller>
      "C:\WINDOWS\system32\ati2evxx.exe" File version = 6.14.10.4132, File size = 413696, File modification date = 03/05/2006  16:43, File description = ATI External Event Utility EXE Module, Product Name = ATI External Event Utility for WindowsNT and Windows9X, Product version = 6.14.10.4132, Company name = ATI Technologies Inc. (Copyright  1999-2004 ATI Technologies Inc.) |-1053054342|0xa2eaeb497ca29ecaeaf0df66ad85c57d|
    ImagePath=C:\WINDOWS\system32\ati2sgag.exe <HKLM\System\ControlSet002\Services\ATI Smart>
      "c:\windows\system32\ati2sgag.exe" File version = 5.13.0025, File size = 520192, File modification date = 03/05/2006  07:57, File description = ATI Smart, Product Name = ATI Smart, Product version = 5.13.0025, Company name =  (Copyright (C) 1998 - 2006 ATI Technologies Inc.) |1058664508|0x312a17dff710a0f4e6d4dd1d52ead1a8|
    ImagePath=system32\DRIVERS\ati2mtag.sys <HKLM\System\ControlSet002\Services\ati2mtag>
      "c:\windows\system32\drivers\ati2mtag.sys" File version = 6.14.10.6614, File size = 1540608, File modification date = 03/05/2006  16:50, File description = ATI Radeon WindowsNT Miniport Driver, Product Name = ATI Radeon WindowsNT Miniport Driver, Product version = 6.14.10.6614, Company name = ATI Technologies Inc. (Copyright (C) 1998-2004 ATI Technologies Inc.) |-328657474|0x492bd2a5f65f218d4ede5764a3bb67e9|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r <HKLM\System\ControlSet002\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.454, File size = 206088, File modification date = 29/07/2008  18:20, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1672052235|0x56046d59e299969544255196afaaa377|
    ImagePath=\??\C:\Documents and Settings\Alexander\ \BiTDefender 10\App\bdfdll.sys <HKLM\System\ControlSet002\Services\bdfdll>
      "\\?\c:\documents and settings\alexander\ \bitdefender 10\app\bdfdll.sys" File version = (null), File size = 8704, File modification date = 04/12/2006  12:51, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |244587866|0x4b8c4b37a298305af83676679329522b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\BthEnum.sys <HKLM\System\ControlSet002\Services\BthEnum>
      "c:\windows\system32\drivers\bthenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 03/08/2004  20:10, File description = Bluetooth Bus Extender, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |689063939|0xd24b8d1784c68a25060fffbe8ed34b76|
    ImagePath=system32\DRIVERS\bthmodem.sys <HKLM\System\ControlSet002\Services\BTHMODEM>
      "c:\windows\system32\drivers\bthmodem.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38016, File modification date = 03/08/2004  20:10, File description = Bluetooth Communications Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-119841680|0x9df0adf74ce1d6371ed60cf92eb1d9a6|
    ImagePath=system32\DRIVERS\bthpan.sys <HKLM\System\ControlSet002\Services\BthPan>
      "c:\windows\system32\drivers\bthpan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 100992, File modification date = 03/08/2004  19:58, File description = Bluetooth Personal Area Networking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1273676637|0x10355270be12641b9764235da39dcf0f|
    ImagePath=System32\Drivers\BTHport.sys <HKLM\System\ControlSet002\Services\BTHPORT>
      "c:\windows\system32\drivers\bthport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 274688, File modification date = 17/08/2004  12:50, File description =   Bluetooth, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-1518874965|0xd818c59f9df3709f97384c0b6754f8bb|
    ImagePath=%SystemRoot%\system32\svchost.exe -k bthsvcs <HKLM\System\ControlSet002\Services\BthServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=System32\Drivers\BTHUSB.sys <HKLM\System\ControlSet002\Services\BTHUSB>
      "c:\windows\system32\drivers\bthusb.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 03/08/2004  20:10, File description = Bluetooth Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1550493412|0xf06d4cb9918b462a84d9ac00027efc30|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet002\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  05:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  12:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet002\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath="C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" <HKLM\System\ControlSet002\Services\FLEXnet Licensing Service>
      "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" File version = 11.03.005, File size = 654848, File modification date = 19/10/2008  21:24, File description = Activation Licensing Service, Product Name = FLEXnet Publisher (32 bit), Product version = (null), Company name = Macrovision Europe Ltd. (Copyright 2005-2006, Macrovision Europe Ltd. All rights reserved.) |-194064634|0x227846995afeefa70d328bf5334a86a5|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet002\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp.060821-0047), File size = 128768, File modification date = 30/08/2007  07:29, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-603269590|0x5a85cd3d07273e3f6fe72ee9c6431632|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\gameenum.sys <HKLM\System\ControlSet002\Services\gameenum>
      "c:\windows\system32\drivers\gameenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 10624, File modification date = 03/08/2004  23:08, File description = Game Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1413550789|0x5f92fd09e5610a5995da7d775eadcd12|
    ImagePath=System32\DRIVERS\gmer.sys <HKLM\System\ControlSet002\Services\gmer>
      "c:\windows\system32\drivers\gmer.sys" File version = 1, 0, 14, 4401, File size = 85969, File modification date = 27/01/2009  13:11, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet002\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp.060316-1523), File size = 262656, File modification date = 30/08/2007  07:29, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2059224107|0x909d110c9634b0f1487eaaea837317d9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet002\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2887 (xpsp.060413-1533), File size = 136320, File modification date = 30/08/2007  07:29, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2887, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-658852528|0x472c75f85e631f8aa87d21c9fee6238d|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet002\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  16:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
    ImagePath=system32\drivers\klbg.sys <HKLM\System\ControlSet002\Services\klbg>
      "c:\windows\system32\drivers\klbg.sys" File version = 8.0.6.2, File size = 32784, File modification date = 29/01/2008  16:29, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1602996343|0x1fdd35aa7efaeb283198a3b14800f37e|
    ImagePath=system32\DRIVERS\klfltdev.sys <HKLM\System\ControlSet002\Services\KLFLTDEV>
      "c:\windows\system32\drivers\klfltdev.sys" File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  17:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
    ImagePath=system32\DRIVERS\klif.sys <HKLM\System\ControlSet002\Services\KLIF>
      "c:\windows\system32\drivers\klif.sys" File version = 8.1.0.100, File size = 213008, File modification date = 30/10/2008  09:23, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |751176906|0x266d62d1c999ca82586be43ec3a87adb|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet002\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  16:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 172416, File modification date = 14/06/2006  08:50, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1130552819|0x8531438246ce9474e41ee1599904c0c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  12:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2934 (xpsp.060620-0455), File size = 454656, File modification date = 30/08/2007  07:29, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2934, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-290306565|0x3ecc5f53a627b28a23aa7cc8c9376db4|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  12:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet002\Services\MSIServer>
      "C:\WINDOWS\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 30/08/2007  07:29, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 30/08/2007  07:31, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 14592, File modification date = 30/08/2007  07:31, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2977, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |840521658|0x5146c3d286e66c72328f6ce6e4d983a8|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\ccdcmb.sys <HKLM\System\ControlSet002\Services\nmwcd>
      "c:\windows\system32\drivers\ccdcmb.sys" File version = 7.1.18.28, File size = 17664, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |-318008148|0x9a908a9bb857c2cceb2907eb9dcaeb8b|
    ImagePath=system32\drivers\ccdcmbo.sys <HKLM\System\ControlSet002\Services\nmwcdc>
      "c:\windows\system32\drivers\ccdcmbo.sys" File version = 7.1.18.28, File size = 22016, File modification date = 15/09/2008  05:56, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006,2007. Nokia. All rights reserved.) |92828695|0x68ec3ee2348e475ea62c66e6aafcfc9b|
    ImagePath=system32\drivers\nmwcdnsu.sys <HKLM\System\ControlSet002\Services\nmwcdnsu>
      "c:\windows\system32\drivers\nmwcdnsu.sys" File version = 6.85.6.18, File size = 138112, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |252079154|0xbe7fd9ca07e7d39f77c78ba5756930d9|
    ImagePath=system32\drivers\nmwcdnsuc.sys <HKLM\System\ControlSet002\Services\nmwcdnsuc>
      "c:\windows\system32\drivers\nmwcdnsuc.sys" File version = 6.85.6.18, File size = 8320, File modification date = 01/02/2008  13:17, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004,2005,2006. Nokia. All rights reserved.) |-1208730092|0x94651f5808d3328d28ef967a9e853b8f|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet002\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  17:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet002\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 30/08/2007  07:31, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pccsmcfd.sys <HKLM\System\ControlSet002\Services\pccsmcfd>
      "c:\windows\system32\drivers\pccsmcfd.sys" File version = 7.0.0.0, File size = 18816, File modification date = 26/08/2008  07:26, File description = PCCS Mode Change Filter Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2006,2007,2008. Nokia. All rights reserved.) |-35912472|0xfd2041e9ba03db7764b2248f02475079|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp.060505-0047), File size = 174592, File modification date = 30/08/2007  07:30, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-479133167|0xed375ce745c42a14f10753f7022ecd6a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet002\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  12:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rfcomm.sys <HKLM\System\ControlSet002\Services\RFCOMM>
      "c:\windows\system32\drivers\rfcomm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59648, File modification date = 03/08/2004  20:10, File description = Bluetooth RFCOMM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-51295389|0x99c4b74981a1413f142a3903130088cb|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2846 (xpsp.060213-1526), File size = 398848, File modification date = 30/08/2007  07:30, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2846, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1167335017|0x92b68a397c659302891e4fef60366721|
    ImagePath=system32\DRIVERS\rspndr.sys <HKLM\System\ControlSet002\Services\rspndr>
      "c:\windows\system32\drivers\rspndr.sys" File version = 5.1.2600.3029 (xpsp_sp2_qfe.061107-2325), File size = 62336, File modification date = 04/12/2006  09:03, File description = Link-Layer Topology Responder Driver for NDIS 6, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3029, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1771733776|0x0e11b35e972796042044bc27ce13b065|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=system32\DRIVERS\RTL8139.SYS <HKLM\System\ControlSet002\Services\rtl8139>
      "c:\windows\system32\drivers\rtl8139.sys" File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet002\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet002\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath="C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" <HKLM\System\ControlSet002\Services\ServiceLayer>
      "c:\program files\pc connectivity solution\servicelayer.exe" File version = 7, 0, 110, 0, File size = 620544, File modification date = 11/11/2008  07:38, File description = ServiceLayer Module, Product Name = PC Connectivity Solution, Product version = 3.6, Company name = Nokia. (Copyright  2002-2008 Nokia. All Rights Reserved.) |153238598|0x3ec8de67b1c78c31e54c0f030e6bd7d5|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 6272, File modification date = 14/06/2006  08:50, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1000408079|0x9bb1dd670cb7505a90fc4e61d4aa8227|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp.050610-1527), File size = 57856, File modification date = 30/08/2007  07:30, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1793708297|0xad3d9d191aea7b5445fe1d82ffbb4788|
    ImagePath=System32\Drivers\sptd.sys <HKLM\System\ControlSet002\Services\sptd>
      "c:\windows\system32\drivers\sptd.sys" File version = (null), File size = 717296, File modification date = 20/10/2008  21:57, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |0|(null)|
    ImagePath=\SystemRoot\system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "C:\WINDOWS\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp.060814-0204), File size = 332928, File modification date = 30/08/2007  07:30, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2022443734|0x5230953c21c811b5fc1ff31ae2b48097|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 30/08/2007  07:31, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp.060420-0256), File size = 360576, File modification date = 14/10/2006  20:38, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2034869751|0xbb4d3a8e6f7eb1d370bc4ad27ab23368|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet002\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 18/08/2004  12:00, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_qfe.070423-0026), File size = 364160, File modification date = 30/08/2007  07:30, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-423551235|0x7b2170ee3d858ce8fbe503904cc9b663|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\usbser_lowerflt.sys <HKLM\System\ControlSet002\Services\upperdev>
      "c:\windows\system32\drivers\usbser_lowerflt.sys" File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |1297056653|0xa34560a5d516a2f5240180370866b99d|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet002\Services\usbccgp>
      "C:\WINDOWS\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 30208, File modification date = 30/08/2007  07:30, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1335945544|0xa45ea1550ea4b368c4fba7ca9d056bc9|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 59264, File modification date = 30/08/2007  07:30, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243434234|0x6d46b1f89134892a862ac56b00ac11fe|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet002\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "C:\WINDOWS\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\drivers\usbser.sys <HKLM\System\ControlSet002\Services\usbser>
      "c:\windows\system32\drivers\usbser.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25600, File modification date = 03/08/2004  21:08, File description = USB Modem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938344023|0x49106ee29074e6a3d3ac9e24c6d791d8|
    ImagePath=system32\DRIVERS\usbser_lowerfltj.sys <HKLM\System\ControlSet002\Services\UsbserFilt>
      "c:\windows\system32\drivers\usbser_lowerfltj.sys" File version = 6.0.6001.18000 built by: WinDDK, File size = 8064, File modification date = 15/09/2008  05:56, File description = Filter Driver for the Toaster Stack, Product Name = Windows (R) Codename Longhorn DDK driver, Product version = 6.0.6001.18000, Company name = Windows (R) Codename Longhorn DDK provider ( Microsoft Corporation. All rights reserved.) |-1292586759|0x6410eebd6e0427466812858ee84c8467|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet002\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.3020 (xpsp.061023-0222), File size = 20608, File modification date = 30/08/2007  07:30, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3020, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1450715770|0x0ee1925590ba1abec14254d54d9870f4|
    ImagePath=system32\DRIVERS\usb8023.sys <HKLM\System\ControlSet002\Services\USB_RNDIS>
      "c:\windows\system32\drivers\usb8023.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12672, File modification date = 18/08/2004  12:00, File description = Remote NDIS USB Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-582984044|0xaf090265ec388bab320f1ff7e7a7d5ea|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\uzezmjy2.sys <HKLM\System\ControlSet002\Services\uzezmjy2>
      "\\?\c:\windows\system32\drivers\uzezmjy2.sys" File version = 1, 3, 0, 0, File size = 11264, File modification date = 28/01/2009  09:59, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |1171257163|0xd565ad44c6c4d934afad3ca4196b09aa|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=System32\Drivers\wdf01000.sys <HKLM\System\ControlSet002\Services\Wdf01000>
      "c:\windows\system32\drivers\wdf01000.sys" File version = 1.7.6001.0 (longhorn_rtm.080118-1840), File size = 503008, File modification date = 27/03/2008  14:27, File description = WDF Dynamic, Product Name = Microsoft Windows Operating System, Product version = 1.7.6001.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2088650301|0xbbcfeab7e871cddac2d397ee7fa91fdc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp.060614-0008), File size = 82944, File modification date = 14/06/2006  09:17, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1519466349|0x0bfa8203b8148fb4e54bc212c41ce497|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  12:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet002\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 914944, File modification date = 02/11/2006  19:06, File description =      Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1210282667|0x30e4f162eb4a91026ae330f2146e6b9f|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet002\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet002\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5730.0 (winmain.060915-1845), File size = 76544, File modification date = 15/09/2006  20:29, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1919534869|0x50eb9e21963b4f06fd010d007d54351b|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet002\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5730.0 (winmain.060915-1845), File size = 82688, File modification date = 15/09/2006  20:30, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5730.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-352712397|0x6e209664bdea8a15b5e8e480d6c607c2|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet002\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet001\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 588800, File modification date = 18/08/2004  12:00, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1621887782|0xaf9d1526cb0fbc34e00dcbf47a88c7eb|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\system32\ieudinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}>
      "c:\windows\system32\ieudinit.exe" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 13824, File modification date = 15/08/2007  05:37, File description = IE Per User Active Setup Uninstall Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-507094222|0x3760a28dbf17713696c7282dbb929eca|
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 11.0.5721.5235 (WMP_11.070626-2109), File size = 318464, File modification date = 27/06/2007  12:08, File description =    Windows Media (Microsoft), Product Name =   Microsoft Windows, Product version = 11.0.5721.5235, Company name = Microsoft Corporation ((C)  .   .) |-728830124|0x850a1c08e0d9891ea258f9140ba2aff0|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "c:\windows\system32\ie4uinit.exe" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 63488, File modification date = 17/08/2007  20:07, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1540633201|0xb12b6e33f0ca8d3ec4f1267628485ded|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\iedkcs32.dll" File version = 17.00.6000.20627 (vista_ldr.070625-1522), File size = 384512, File modification date = 17/08/2007  20:07, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 17.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1757036338|0xb2658ca7bfa5cff6f6187b51d8d8615d|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  12:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 124928, File modification date = 17/08/2007  20:07, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1452444986|0x59ecf3d6b3db28fdde233eeb6cb6b8e1|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 92618, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-42523716|0x79170533b362ee6e5725c97683c865ff|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 124928, File modification date = 17/08/2007  20:07, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1452444986|0x59ecf3d6b3db28fdde233eeb6cb6b8e1|
      "c:\windows\inf\wmp11.inf" File version = (null), File size = 2456, File modification date = 02/11/2006  20:17, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1418256405|0xa992ff38e8167c8a2ff50137f41d586d|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  12:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -BaseSettings <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "c:\windows\system32\ie4uinit.exe" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 63488, File modification date = 17/08/2007  20:07, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1540633201|0xb12b6e33f0ca8d3ec4f1267628485ded|
    StubPath=C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install <HKLM\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\mscories.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 74240, File modification date = 23/09/2005  05:28, File description = Microsoft .NET IE SECURITY REGISTRATION, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1383650402|0x46e55aea48bad9297df685c722619bd6|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 18/08/2004  12:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 18/08/2004  12:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 69120, File modification date = 18/08/2004  12:00, File description =  API  , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |937249001|0xf708fce5338bfaf52cb28b0dffa00190|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 18/08/2004  12:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 18/08/2004  12:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 18/08/2004  12:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 109568, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1241159835|0x8923105d90451a754c9365ae9392dff3|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 18/08/2004  12:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 18/08/2004  12:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4064, File modification date = 18/08/2004  12:00, File description =    PC- , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |-1391970634|0x13b3e8097afc3c12814770621f3487fc|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16384, File modification date = 18/08/2004  12:00, File description =   IMA ADPCM  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1638053536|0xb45c691988afab9c9bd93ba187ca2474|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 18/08/2004  12:00, File description =   ADPCM  MSACM Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1995141393|0x0bae796a3b96f0e48e11e413d5747b4c|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 18/08/2004  12:00, File description =  Microsoft CCITT G.711 (A-Law / u-Law)  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1854403983|0xe065a3c00733efcf1c69d415a87a5068|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 18/08/2004  12:00, File description =    GSM 6.10  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1918754933|0xaa2760236496ff786daef9f14014d66d|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 18/08/2004  12:00, File description =    DSP Group TrueSpeech  MSACM V3.50, Product Name = DSP GROUP Windows NT TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. ( DSP Group, Inc. 1993-1996) |-594300875|0xa0f3e55689268941af7e1c19c4d4b2f3|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 18/08/2004  12:00, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1194508810|0x16e6c32c0d05cf16e6b0b73beb2bb970|
    vidc.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 17/08/2004  12:05, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 18/08/2004  12:00, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-1887696561|0xb3af437917f7cc0b1ff4b52d7079cd17|
    vidc.iyuv=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47616, File modification date = 30/08/2007  07:31, File description = Intel Indeo(R) Video YUV Codec, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Intel, 1992-1997) |557179088|0xac314e854bb60b75e45d7a541705ed26|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description =   Microsoft RLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1062918381|0x83949714f70084e2dc25184215ed2d40|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 18/08/2004  12:00, File description =   Microsoft Video 1, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1998454945|0xc3d62768e82a887f0b8bc3c45fb89acb|
    vidc.uyvy=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 30/08/2007  07:31, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yuy2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 30/08/2007  07:31, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yvu9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 18/08/2004  12:00, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-1265855821|0x1622231279c17eab9c4d37e3d2aa5fea|
    vidc.yvyu=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 30/08/2007  07:31, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 18/08/2004  12:00, File description = Microsoft G.723.1 CODEC  MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-559110528|0x93091b2a7a3cf80b53046601717d1a2b|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 17/08/2004  12:05, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.2180, File size = 188416, File modification date = 18/08/2004  12:00, File description =  Microsoft H.261 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-1117483247|0x01b48472269ebe39f1c52c4696d5ffbb|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 18/08/2004  12:00, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |323994253|0xed90974278c0376327838d47adc4173f|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 18/08/2004  12:00, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |271167773|0x39724c2030902f3211103e10399b5701|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 18/08/2004  12:00, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-940912838|0x415fa906fbc834b06b3aec74bd2e75af|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 18/08/2004  12:00, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1329995150|0x7fdaa916871c74eda01463132902526b|
    msacm.l3acm=C:\WINDOWS\system32\l3codeca.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codeca.acm" File version = 1, 9, 0, 0305, File size = 290816, File modification date = 18/08/2004  12:00, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |-340337155|0xa519ab541c3da214265fe481a19c0dd2|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    msacm.divxa32=msaud32_divx.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32_divx.acm" File version = 8.00.00.4487, File size = 186368, File modification date = 03/02/2003  06:01, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |-1987450531|0x71ea3dce8b998b6730a942469d15ed44|
    vidc.tscc=tsccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsccvid.dll" File version = 2.0.4, File size = 110592, File modification date = 15/04/2003  22:10, File description = TechSmith Screen Capture Codec, Product Name = TechSmith Screen Capture Codec, Product version = 2.0.4, Company name = TechSmith Corporation (Copyright  1999-2003 TechSmith Corp. All rights reserved.) |-342119698|0xbd8d29294cd8c44651852239bce66cda|
    VIDC.FPS1=frapsvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\frapsvid.dll" File version = 2, 7, 4, 5867, File size = 36864, File modification date = 18/06/2006  13:45, File description = Fraps, Product Name = FRAPS, Product version = 2, 7, 4, 5867, Company name = Beepa P/L (Copyright  Beepa P/L 2005) |355324706|0xd3c6d2debf8c835b3567416989c14d7f|
    vidc.DIVX=DivX.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\divx.dll" File version = 6.8.5.5, File size = 684032, File modification date = 28/10/2008  22:35, File description = DivX, Product Name = DivX, Product version = 6.8.5.5, Company name = DivX, Inc. (Copyright  2000-2008 DivX, Inc. All rights reserved.) |-953097001|0xb8471147864bd206b906029c9112063a|
    vidc.yv12=DivX.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\divx.dll" File version = 6.8.5.5, File size = 684032, File modification date = 28/10/2008  22:35, File description = DivX, Product Name = DivX, Product version = 6.8.5.5, Company name = DivX, Inc. (Copyright  2000-2008 DivX, Inc. All rights reserved.) |-953097001|0xb8471147864bd206b906029c9112063a|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_qfe.061219-0311), File size = 8476160, File modification date = 30/08/2007  07:30, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |2090782200|0x8f4fa8b31d09f76aac534b82d1c1c1b1|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "C:\WINDOWS\system32\stobject.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 18/08/2004  12:00, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
    WPDShServiceObj={AAA288BA-9A4C-45B0-95D7-94D524869DB5} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\wpdshserviceobj.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 18/10/2006  17:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 620032, File modification date = 18/08/2004  12:00, File description =   -  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1029054611|0x234237964c059728b21a334ff0d55fbd|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 18/08/2004  12:00, File description =   OLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-797951335|0x992fb236cfe085aeb93d6e8372c9eee9|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {41E300E0-78B6-11ce-849B-444553540000}
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-879404280|0x1ef3747e65cf364f870b891a5bf139aa|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |1757095939|0x6070a9b3048a175a6b75e6e243186b2c|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |326965962|0x44a2a3005d504834935896e96016e66d|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =     "", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-54810607|0xf1b3e5fd6e8a09ec3ba37089cc861caf|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  12:00, File description =  -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-26443466|0xcc6aef6ae92cc25ebe9e11a0100cabdf|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 1501696, File modification date = 18/08/2004  12:00, File description = Windows DiskCopy, Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-1768062996|0xa525c37757a1da8ae5acb10feec1ac28|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14848, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1755583219|0xf6fa816cbe46749b8d5c875aa0a0226a|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 565248, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-486691064|0x44fa764e4bea139f5b1b2ac5686b6b65|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 146432, File modification date = 18/08/2004  12:00, File description =  DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1193260270|0xf48c6edf98e56bdee91f4d523f24d5c3|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 190464, File modification date = 18/08/2004  12:00, File description =  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |224525855|0xb5aa35d0c14683a66b283f91441c5163|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 18/08/2004  12:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |-554862870|0x2fb8d5af59fadc2eaea0ee56cc8fded7|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382976, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1630719410|0xc53427e90013d85c6b2559e79f2748b1|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1306393081|0xd805d2a6f2fcf780a3c2c21e9b1907d1|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 1709056, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |520659526|0xab8a8f1da31b1b4810b3bba899fa6470|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2977 (xpsp.060818-0034), File size = 1709056, File modification date = 30/08/2007  07:29, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2977, Company name =   (  .   .) |520659526|0xab8a8f1da31b1b4810b3bba899fa6470|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60928, File modification date = 18/08/2004  12:00, File description = CPL-  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1054669753|0x3900fdcd2de579aeca9fd731b6faa716|
    {07C45BB1-4A8C-4642-A1F5-237E7215FF66}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {1C1EDB47-CE22-4bbb-B608-77B48F83C823}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {205D7A97-F16D-4691-86EF-F3075DCCA57D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {3028902F-6374-48b2-8DC6-9725E775B926}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {43886CD5-6529-41c4-A707-7B3C92C05E68}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {44C76ECD-F7FA-411c-9929-1B77BA77F524}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {4B78D326-D922-44f9-AF2A-07805C2A3560}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {6038EF75-ABFC-4e59-AB6F-12D397F6568D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "c:\windows\system32\extmgr.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 132608, File modification date = 17/08/2007  20:07, File description = Extensions Manager, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1179277840|0xba49fdaff84b709b319f67b8b81618b7|
    {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {6CF48EF8-44CD-45d2-8832-A16EA016311B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {73CFD649-CD48-4fd8-A272-2070EA56526B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "c:\windows\system32\occache.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 102400, File modification date = 17/08/2007  20:07, File description = Object Control Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-315887576|0x9536e63910f41587b187a975316b69ce|
    {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {9D958C62-3954-4b44-8FAB-C4670C1DB4C2}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {B31C5FAE-961F-415b-BAF0-E697A5178B94}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {BC476F4C-D9D7-4100-8D4E-E043F6DEC409}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {E6EE9AAC-F76B-4947-8260-A9F136138E11}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {F2CF5485-4E02-4f68-819C-B92DE9277049}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {FDE7673D-2E19-4145-8376-BBD58C4BC7BA}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 6059008, File modification date = 15/08/2007  05:37, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936325552|0x8bdebe57a75f0d39bb8354a8c3cf5a2e|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.6.0.8825, File size = 65536, File modification date = 30/08/2007  07:30, File description = Microsoft (r) Shell Extension for Windows Script Host, Product Name = Microsoft (r) Windows Script Host, Product version = 5.6.0.8825, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-704085518|0x1905f39172a4864f8abad9337bdcad22|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 487424, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1082205812|0x6bcbbfe858ecf0ede5aa6abc95ce3ba7|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 216408, File modification date = 30/08/2007  07:30, File description = Automatic Updates Control Panel, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1072536858|0xd7fa9a9750403cc68dc209cde7c50d7a|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2721 (xpsp.050718-1540), File size = 55808, File modification date = 30/08/2007  07:30, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2721, Company name = Microsoft Corporation (  .   .) |1106766651|0x38623626a45b1676875f5c7d96d44bf3|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2721 (xpsp.050718-1540), File size = 55808, File modification date = 30/08/2007  07:30, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2721, Company name = Microsoft Corporation (  .   .) |1106766651|0x38623626a45b1676875f5c7d96d44bf3|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {EFA24E62-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.20627 (vista_ldr.070625-1522), File size = 232960, File modification date = 27/06/2007  14:15, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.20627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1826061896|0xee6e26d5f22a9e90700cea95142a8fff|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 249344, File modification date = 18/08/2004  12:00, File description =   FTP Microsoft Internet Explorer FTP, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1626139983|0xe989f6f58a3b0677ac0107c2eee449c4|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3422, File size = 24064, File modification date = 18/08/2004  12:00, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3422, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1739972169|0x77bd91b6b34a661789c57f873cfacebe|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 18/08/2004  12:00, File description =      DFS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1748421650|0xe2651ee9dd124f91a8ba547d4a09f33a|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172032, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-988848672|0x8a2e3ff220444dce8005bd42c896ff99|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  12:00, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1016997120|0x3f74336f9999d7a303ce8a31fa33118a|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 84992, File modification date = 18/08/2004  12:00, File description =    CAB-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1306264757|0xbfe9fba0aea4f8f67e4d3c3fee5eece2|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |837743628|0x1a694b3159d8a4bba2f1cfb8222c5302|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {640167b4-59b0-47a6-b335-a6b3c0695aea}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 276992, File modification date = 18/10/2006  17:47, File description = Portable Media Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation. All rights reserved.) |-656474916|0x4c48f1b30a82583caee0da02dd7259ee|
    {35786D3C-B075-49b9-88DD-029876E11C01}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 18/10/2006  17:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 18/10/2006  17:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}
      "c:\program files\winrar\rarext.dll" File version = (null), File size = 128512, File modification date = 29/05/2007  23:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-400282785|0x48d60d2f02af2ae613b12528669a4506|
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
      "c:\program files\common files\microsoft shared\web folders\msonsext.dll" File version = 11.0.5510.0, File size = 1292872, File modification date = 11/07/2003  07:15, File description = Microsoft Web Folders, Product Name = SharePoint Portal Server, Product version = 11.0.5510.0, Company name = Microsoft Corporation (Copyright (c) 2001-2003 Microsoft Corporation.  All rights reserved.) |1833844665|0xbdbf48d13c5343cced93e675effdb72c|
    {42042206-2D85-11D3-8CFF-005004838597}
      "c:\program files\microsoft office\office11\msohev.dll" File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  03:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
    {1D2680C9-0E2A-469d-B787-065558BC7D43}
      "c:\windows\system32\mscoree.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 270848, File modification date = 23/09/2005  05:28, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1132191093|0x8d89c22f009d7a46136ffde4cbfc3b1a|
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.454, File size = 222472, File modification date = 29/07/2008  18:22, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1405225933|0xca0995956a9fe912c6c4fa07efd02ae5|
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  05:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  05:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}
      "c:\program files\nokia\nokia pc suite 7\phonebrowser.dll" File version = 7, 1, 105, 0, File size = 613888, File modification date = 08/09/2008  06:58, File description = Phone Browser, Product Name = Phone Browser, Product version = 3.0, Company name = Nokia (Copyright  2006-2008 Nokia. All rights reserved.) |1386149333|0xe8a41d540f5079d90d570c2255e9edf9|
  *\Software\Microsoft\Internet Explorer\MenuExt\*
    DEFAULT=res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 <HKEY_USERS\S-1-5-21-1078081533-1343024091-725345543-1003\Software\Microsoft\Internet Explorer\MenuExt\&  Microsoft Excel>
      "c:\program files\microsoft office\office11\excel.exe" File version = 11.0.5612, File size = 10073144, File modification date = 13/08/2003  07:34, File description = Microsoft Office Excel, Product Name = Microsoft Office 2003, Product version = 11.0.5612, Company name = Microsoft Corporation (Copyright  1985-2003 Microsoft Corporation.  All rights reserved.) |-574925247|0xbbcc5d4e09d7fd9454910261e6dc0725|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 18/08/2004  12:00, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1899670254|0x5abd005f6749e724f88acc5d96efb921|
  *\SOFTWARE\Microsoft\Internet Explorer\Extensions\*
    HotIcon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll,101 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.454, File size = 222472, File modification date = 29/07/2008  18:22, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1405225933|0xca0995956a9fe912c6c4fa07efd02ae5|
    Icon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll,102 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.454, File size = 222472, File modification date = 29/07/2008  18:22, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1405225933|0xca0995956a9fe912c6c4fa07efd02ae5|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    BandCLSID={85E0B171-04FA-11D1-B7DA-00A0C90348D6} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.454, File size = 222472, File modification date = 29/07/2008  18:22, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.454, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1405225933|0xca0995956a9fe912c6c4fa07efd02ae5|
    BandCLSID={FF059E31-CC5A-4E2E-BF3B-96E929D65503} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refiebar.dll" File version = 11.0.5510, File size = 40512, File modification date = 15/07/2003  03:57, File description = Allows you to use the Research Library and its collection of information services from Microsoft Internet Explorer, Product Name = Research Library Explorer Bar, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |-1898593064|0x0fa0bdaa2ff4ed7e5a2fa2ec1b536712|
    Icon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBAR.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbar.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  16:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    HotIcon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbarh.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  16:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 17/08/2007  20:07, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 17/08/2007  20:07, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\wshbth.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108032, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |101157119|0x4701970cd9e693d25104d8e442c53d10|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\wshbth.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108032, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |101157119|0x4701970cd9e693d25104d8e442c53d10|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      127.0.0.1       localhost
STARTUP MENU
  C:\Documents and Settings\All Users\ \\
      "C:\Documents and Settings\All Users\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 19/10/2008  19:03, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\Documents and Settings\Alexander\ \\
      "C:\Documents and Settings\Alexander\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 19/10/2008  19:03, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
