GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Pentium(R) Dual-Core  CPU      E5200  @ 2.50GHz Unknown speed

Processors number:
		2

BIOS:
		073108 - 20080731 BIOS Date: 07/31/08

System Date:
		22/09/2009 (dd/mm/yyyy)

Total phisical memory:
		2038,172 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		2038,172 Mb

Available virtual memory:
		1992,400 Mb

Hard drives:
		MAXTOR STM3160215AS

Logical disks structure:
		c:\ FIXED SYSTEM Full size - 60000 Mb, Free size - 53358 Mb, File system - NTFS
		d:\ FIXED Full size - 92624 Mb, Free size - 80959 Mb, File system - NTFS
		e:\ CDROM Full size - 92624 Mb, Free size - 80959 Mb, File system - 
		h:\ REMOVABLE Full size - 3992 Mb, Free size - 3608 Mb, File system - FAT32

Video adapters:
		Intel(R) G33/G31 Express Chipset Family
			DRIVER - system32\DRIVERS\igxpmp32.sys ("c:\windows\system32\drivers\igxpmp32.sys") File version = 6.14.10.4990, File size = 6047904, File modification date = 11/09/2008  02:52, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |-1046257959|0xd1359e54d9755d28e56b17a352ab8aae|

NetWork adapters:
		Atheros L2 Fast Ethernet 10/100 Base-T Controller
			DRIVER - system32\DRIVERS\l251x86.sys ("c:\windows\system32\drivers\l251x86.sys") File version = 2.5.7.15 built by: WinDDK, File size = 30720, File modification date = 17/04/2008  16:16, File description = Atheros Fast Ethernet Controller ndis miniport driver, Product Name = Atheros L2 Fast Ethernet Controller, Product version = 2.5.7.15, Company name = Atheros Communications, Inc. (2001-2006 Atheros Communications, Inc. All Rights Reserved.) |-285413688|0x83ef26c44c53581bdb67866b922aed93|

Modems:
		U.S. Robotics 56K FAX EXT

Multimedia:
		VIA High Definition Audio
			DRIVER - system32\drivers\viahduaa.sys ("c:\windows\system32\drivers\viahduaa.sys") File version = 6,0,01,1520 built by: WinDDK, File size = 874880, File modification date = 16/09/2008  15:20, File description = VIA High Definition Audio Function Driver, Product Name = VIA High Definition Audio Driver, Product version = 6,0,01,1520, Company name = VIA Technologies, Inc. ( Microsoft Corporation. All rights reserved.) |596645202|0xf59b9da1fde462a662c84a0f279c0693|
		Microsoft Streaming Clock Proxy
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  19:09, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
		Microsoft Streaming Quality Manager Proxy
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  19:09, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
		Microsoft Streaming Service Proxy
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  19:09, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
		Microsoft Kernel System Audio Device
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:45, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
		Microsoft Kernel DRM Audio Descrambler
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
		Microsoft Kernel Wave Audio Mixer
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  19:15, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
		Microsoft Kernel Acoustic Echo Canceller
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  17:09, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
		Microsoft Kernel GS Wavetable Synthesizer
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  19:15, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
		Microsoft Kernel DLS Synthesizer
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
		Microsoft WINMM WDM Audio Compatibility Driver
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:47, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
		Microsoft Kernel Audio Splitter
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|

Printers:
		HP LaserJet 1100 (MS) - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRV.DLL ("c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll") File version = 6.0.6001.22116 (vistasp1_ldr.080215-1730), File size = 373248, File modification date = 14/04/2008  00:42, File description = Unidrv Printer Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.6001.22116, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1198091760|0x62c44b022aa669eb5785e1f01b8c3acd|
		Microsoft Office Document Image Writer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mdigraph.dll ("c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll") File version = 11.3.8166.2, File size = 758664, File modification date = 09/04/2007  08:24, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.8166.2, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2006) |114118713|0x4d607ba2b1db9117b551c03cbc155997|

Removable devices:
		ATAPI iHAP122   8
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  19:10, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Professional Edition, 5.1.2600 Service Pack 3

Environment variables:
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\Natalya\Application Data
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=USER01
		ComSpec=C:\WINDOWS\system32\cmd.exe
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\Natalya
		LOGONSERVER=\\USER01
		NUMBER_OF_PROCESSORS=2
		OS=Windows_NT
		Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\fox;c:\arx;c:\
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 6 Model 23 Stepping 6, GenuineIntel
		PROCESSOR_LEVEL=6
		PROCESSOR_REVISION=1706
		ProgramFiles=C:\Program Files
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\WINDOWS\Temp
		TMP=C:\WINDOWS\Temp
		USERDOMAIN=USER01
		USERNAME=Natalya
		USERPROFILE=C:\Documents and Settings\Natalya
		windir=C:\WINDOWS
		__COMPAT_LAYER=DisableNXShowUI 

Installed network protocols:
---------clients---------
		Client for Microsoft Networks
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		WebClient
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
--------protocol---------
		NDIS Usermode I/O Protocol
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 14/04/2008  00:51, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
		Remote Access NDIS WAN Driver
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:50, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
		Point to Point Tunneling Protocol
		Point to Point Protocol Over Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  19:27, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
		Internet Protocol (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 16/09/2009  12:26, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1831242800|0xcbeebeb899e31ef52b962cb31fc8ca5c|
		WINS Client(TCP/IP) Protocol
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:51, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
		Message-oriented TCP/IP Protocol (SMB session)
		Layer 2 Tunneling Protocol
--------services---------
		Remote Access Connection Manager
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Dial-Up Server
		Generic Packet Classifier
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  19:26, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
		Wireless Zero Configuration
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		NetBIOS Interface
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  19:26, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
		Kaspersky Anti-Virus NDIS Filter
			DRIVER - system32\DRIVERS\klim5.sys ("c:\windows\system32\drivers\klim5.sys") File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  12:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
		Steelhead
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Dial-Up Client
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 23/08/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
		QoS Packet Scheduler
			DRIVER - system32\DRIVERS\psched.sys ("c:\windows\system32\drivers\psched.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  19:26, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
		File and Printer Sharing for Microsoft Networks
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		Application Layer Gateway
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
-----------by type----------
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]
		RSVP UDP Service Provider
		RSVP TCP Service Provider
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A2EB4E-DAD4-42AB-978D-53B02B6400EB}] SEQPACKET 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A2EB4E-DAD4-42AB-978D-53B02B6400EB}] DATAGRAM 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{617F31C6-0FEC-40FD-BA7E-D16E707351EB}] SEQPACKET 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{617F31C6-0FEC-40FD-BA7E-D16E707351EB}] DATAGRAM 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{D9C40BA8-5F2B-4698-A473-7E77941483A5}] SEQPACKET 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{D9C40BA8-5F2B-4698-A473-7E77941483A5}] DATAGRAM 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A66A47F3-747D-4F04-B19D-A72E106613A3}] SEQPACKET 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A66A47F3-747D-4F04-B19D-A72E106613A3}] DATAGRAM 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5C22780-CC6E-4972-B190-EEF87092DDEC}] SEQPACKET 4
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5C22780-CC6E-4972-B190-EEF87092DDEC}] DATAGRAM 4

Installed applications/hotfixes:
		1C  7.7 77.25
			DEINSTALLATION: C:\Program Files\1Cv77\uninst.exe
		Adobe Flash Player 10 ActiveX 10.0.22.87 (Adobe Systems Incorporated)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
		Adobe Flash Player 10 Plugin 10.0.22.87 (Adobe Systems Incorporated)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
		FAR file manager
			DEINSTALLATION: C:\Program Files\Far\Uninstall.exe
		FlashGet(JetCar)
			DEINSTALLATION: C:\PROGRA~1\FlashGet\UNWISE.EXE C:\PROGRA~1\FlashGet\INSTALL.LOG
		Intel(R) Graphics Media Accelerator Driver (Intel Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\igxpun.exe -uninstall
		Windows Internet Explorer 8 20090308.140743, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie8\spuninst\spuninst.exe"
		Windows Internet Explorer 8 Multilingual User Interface (MUI) 20090411.120000, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie8updates\IE8-MUI\spuninst\spuninst.exe"
		VIA    (English) 1.27, installation data=20090608 (VIA Technologies, Inc.)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169} 
		PowerQuest PartitionMagic 8.0 (English) 8.00.000, installation data=20090608 (PowerQuest)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804} 
		Kaspersky Internet Security 2009 8.0.0.506 ( )
			DEINSTALLATION: MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
		Update for Windows XP (KB898461) 1 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB923561) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
		Hotfix for Windows Media Format 11 SDK (KB929399), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
		Security Update for Windows Media Player 11 (KB936782), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB938464) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
		Hotfix for Windows Media Player 11 (KB939683), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB941569), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB946648) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB950762) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB950974) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951066) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
		Update for Windows XP (KB951072-v2) 2, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951376-v2) 2, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951698) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB951748) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
		Update for Windows XP (KB951978) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB952004) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
		Security Update for Windows Media Player (KB952069), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB952287) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB952954) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB953839) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
		Security Update for Windows Media Player 11 (KB954154), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB954211) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB954459) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB954600) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB955069) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
		Update for Windows XP (KB955839) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956391) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956572) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956744) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956802) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956803) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB956841) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB957095) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB957097) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB958644) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB958687) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB958690) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB959426) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
		Critical Update for Windows Media Player 11 (KB959772), installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB960225) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB960715) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB960803) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB960859) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB961371) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB961373) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB961501) 1, installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
		Update for Windows XP (KB967715) 1, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
		Update for Windows XP (KB968389) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB968537) 1, installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 8 (KB969897) 1, installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
		Security Update for Windows XP (KB969898) 1, installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB970238) 1, installation data=20090617 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB970653-v3) 3, installation data=20090904 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB971557) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB971633) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB971657) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
		Security Update for Windows Internet Explorer 8 (KB972260) 1, installation data=20090904 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
		Security Update for Windows XP (KB973346) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB973354) 1, installation data=20090904 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB973507) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
		Security Update for Windows Media Player (KB973540), installation data=20090909 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
		Update for Windows XP (KB973815) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
		Security Update for Windows XP (KB973869) 1, installation data=20090826 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
		Mozilla Firefox (3.5.2) 3.5.2 (ru) (Mozilla)
			DEINSTALLATION: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
		MSN
			DEINSTALLATION: C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
		Nero 6 Enterprise Edition
			DEINSTALLATION: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
		NOD32 Update Viewer 4.05.3, installation data=20090910 (nodview.net.ru)
			DEINSTALLATION: "C:\Program Files\NOD32view\unins000.exe"
		Total Commander 7.00 PowerPack
			DEINSTALLATION: "C:\Program Files\Total Commander\uninstall.exe"
		UserGate (remove only)
			DEINSTALLATION: "C:\Program Files\UserGate\bt-uninst.exe"
		Winamp 5.541  (Nullsoft, Inc)
			DEINSTALLATION: "C:\Program Files\Winamp\UninstWA.exe"
		 WinRAR
			DEINSTALLATION: C:\Program Files\WinRAR\uninstall.exe
		Platform (English) 1.27, installation data=20090608 (VIA Technologies, Inc.)
		Java(TM) 6 Update 13 (Russian) 6.0.130, installation data=20090610 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
		ACDSee Photo Manager 2009 (English) 11.0.85, installation data=20090610 (ACD Systems International)
			DEINSTALLATION: MsiExec.exe /I{300578F9-9EFF-4B93-9AB1-C0E5707EF463}
		WebFldrs XP (English) 9.50.7523, installation data=20090608 (Microsoft Corporation)
		AcronisTrueImageHome (Russian) 10.0.4871, installation data=20090626 (Acronis)
			DEINSTALLATION: MsiExec.exe /X{419CF344-3D94-4DAD-99C8-EA7B00E5EA8B}
		HP Precisionscan Pro 3.1 (English) 3.1.4.0000, installation data=20090616 (Hewlett-Packard)
			DEINSTALLATION: MsiExec.exe /I{6B36DEBF-27D0-4B1E-858D-D397091C6C7D}
		PartitionMagic (English) 8.00.000, installation data=20090608 (PowerQuest)
		Kaspersky Internet Security 2009 (Russian) 8.0.0.506, installation data=20090608 ( )
			DEINSTALLATION: MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
		Microsoft Office -    2003 (Russian) 11.0.8173.0, installation data=20090608 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
		Adobe Reader 9.1 - Russian (Russian) 9.1.0, installation data=20090612 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A91000000001}

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  17:09, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  19:21, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  19:14, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
	system32\DRIVERS\Ip6Fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  19:23, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
	system32\DRIVERS\ipfltdrv.sys - stopped (demand) ("c:\windows\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 23/08/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  19:27, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  19:24, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  19:09, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  19:09, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  19:09, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
	system32\DRIVERS\ndisuio.sys - stopped (demand) ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 14/04/2008  00:51, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 23/08/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 23/08/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = 4.03.086, File size = 20480, File modification date = 13/04/2008  17:09, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
	\SystemRoot\system32\DRIVERS\sr.sys - stopped (disabled) ("C:\WINDOWS\system32\drivers\sr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  19:06, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  19:15, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
	system32\DRIVERS\usbscan.sys - stopped (demand) ("c:\windows\system32\drivers\usbscan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  19:15, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
	system32\DRIVERS\WudfPf.sys - stopped (demand) ("c:\windows\system32\drivers\wudfpf.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
	system32\DRIVERS\wudfrd.sys - stopped (demand) ("c:\windows\system32\drivers\wudfrd.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
	\WINDOWS\system32\ntkrnlpa.exe ("c:\windows\system32\ntkrnlpa.exe") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 2023936, File modification date = 06/02/2009  10:32, File description = NT Kernel & System, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208530143|0x65d4220799e6fc2cb079070a6393cc0e|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 134400, File modification date = 13/04/2008  19:01, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1366762441|0x4329ee7d502c9113eba0f9570392f5ee|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 23/08/2001  12:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 23/08/2001  12:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  19:06, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
	\WINDOWS\system32\DRIVERS\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 23/08/2001  12:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  19:06, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  19:06, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  08:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24960, File modification date = 13/04/2008  19:10, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2111945760|0x52e60f29221d0d1ac16737e8dbf7c3e9|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42368, File modification date = 13/04/2008  19:09, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |946723267|0xa80b9a0bad1b73637dbcbba7df72d3fd|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 23/08/2001  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
	dmload.sys ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 23/08/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	dmio.sys ("c:\windows\system32\drivers\dmio.sys") File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  19:14, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 19712, File modification date = 13/04/2008  19:10, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1551811490|0xbeb3ba25197665d82ec7065b724171c6|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52352, File modification date = 13/04/2008  19:11, File description = Volume Shadow Copy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2146132966|0x4c8fcb5cc53aab716d810740fe59d025|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  19:10, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  19:10, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 49536, File modification date = 13/04/2008  19:46, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34227393|0xfe47dd8fe6d7768ff94ebec6c74b2719|
	fltMgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  19:03, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
	klbg.sys ("c:\windows\system32\drivers\klbg.sys") File version = 8.0.8.2, File size = 33808, File modification date = 08/06/2009  12:13, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1479725553|0xf9089982ed97340984e3dd60edd75490|
	PxHelp20.sys ("c:\windows\system32\drivers\pxhelp20.sys") File version = 3.00.56a, File size = 43528, File modification date = 07/03/2007  23:51, File description = Px Engine Device Driver for Windows 2000/XP, Product Name = PxHelp20, Product version = (null), Company name = Sonic Solutions (Copyright  Sonic Solutions) |-1565375476|0xd86b4a68565e444d76457f14172c875a|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 92928, File modification date = 24/06/2009  11:18, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-756408812|0xb467646c54cc746128904e1654c750c1|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 574976, File modification date = 13/04/2008  19:45, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2068797709|0x78a08dd6a8d65e697c18e1db01c5cdca|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 182656, File modification date = 13/04/2008  19:50, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1684897513|0x1df7f42665c94b825322fae71721130d|
	timntr.sys ("c:\windows\system32\drivers\timntr.sys") File version = 3.3 build 443, File size = 395744, File modification date = 26/06/2009  09:01, File description = Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |1366719406|0x64694b2a5c772e1c61feac300ed90ca6|
	snapman.sys ("c:\windows\system32\drivers\snapman.sys") File version = 3.0 build 303, File size = 114048, File modification date = 26/06/2009  09:01, File description = Acronis Snapshot API, Product Name = Acronis Snapshot API, Product version = 3.0 build 303, Company name = Acronis (Copyright (c) Acronis 2000-2006) |503486824|0xe78c98378a071ce4d48a7c514fa98fa1|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 105344, File modification date = 13/04/2008  19:47, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1122536307|0x2f625d11385b1a94360bfc70aaefdee1|
	kl1.sys ("c:\windows\system32\drivers\kl1.sys") File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  12:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
	\WINDOWS\system32\drivers\TDI.SYS ("c:\windows\system32\drivers\tdi.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19072, File modification date = 13/04/2008  19:30, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |501454851|0x0539d5e53587f82d1b4fd74c5be205cf|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  19:01, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
	\SystemRoot\system32\DRIVERS\igxpmp32.sys ("C:\WINDOWS\system32\drivers\igxpmp32.sys") File version = 6.14.10.4990, File size = 6047904, File modification date = 11/09/2008  02:52, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |-1046257959|0xd1359e54d9755d28e56b17a352ab8aae|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 81664, File modification date = 13/04/2008  19:14, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1873544039|0xe28726b72c46821a28830e077d39a55b|
	\SystemRoot\system32\DRIVERS\HDAudBus.sys ("C:\WINDOWS\system32\drivers\hdaudbus.sys") File version = 5.10.01.5013 built by: WinDDK, File size = 144384, File modification date = 13/04/2008  17:06, File description = High Definition Audio Bus Driver v1.0a, Product Name = Microsoft Windows Operating System, Product version = 5.10.01.5013, Company name = Windows (R) Server 2003 DDK provider ( Microsoft Corporation. All rights reserved.) |-529683897|0x573c7d0a32852b48f3058cfd8026f511|
	\SystemRoot\system32\DRIVERS\l251x86.sys ("c:\windows\system32\drivers\l251x86.sys") File version = 2.5.7.15 built by: WinDDK, File size = 30720, File modification date = 17/04/2008  16:16, File description = Atheros Fast Ethernet Controller ndis miniport driver, Product Name = Atheros L2 Fast Ethernet Controller, Product version = 2.5.7.15, Company name = Atheros Communications, Inc. (2001-2006 Atheros Communications, Inc. All Rights Reserved.) |-285413688|0x83ef26c44c53581bdb67866b922aed93|
	\SystemRoot\system32\DRIVERS\usbuhci.sys ("C:\WINDOWS\system32\drivers\usbuhci.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  19:15, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 143872, File modification date = 13/04/2008  19:15, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929906986|0x791912e524cc2cc6f50b5f2b52d1eb71|
	\SystemRoot\system32\DRIVERS\klfltdev.sys ("C:\WINDOWS\system32\drivers\klfltdev.sys") File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  13:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  19:15, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
	\SystemRoot\system32\DRIVERS\serial.sys ("C:\WINDOWS\system32\drivers\serial.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 64512, File modification date = 13/04/2008  19:45, File description = Serial Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1099258748|0xcca207a8896d4c6a0c9ce29a4ae411a7|
	\SystemRoot\system32\DRIVERS\serenum.sys ("C:\WINDOWS\system32\drivers\serenum.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 15744, File modification date = 13/04/2008  19:10, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885921804|0x0f29512ccd6bead730039fb4bd2c85ce|
	\SystemRoot\system32\DRIVERS\parport.sys ("C:\WINDOWS\system32\drivers\parport.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80128, File modification date = 14/04/2008  00:51, File description = Parallel Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1231929630|0x5575faf8f97ce5e713d108c2a58d7c7c|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:48, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  19:09, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:51, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
	\SystemRoot\system32\DRIVERS\imapi.sys ("C:\WINDOWS\system32\drivers\imapi.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  19:11, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  19:10, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 14/04/2008  00:10, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
	\SystemRoot\system32\DRIVERS\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 141056, File modification date = 13/04/2008  19:46, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2048087826|0x0753515f78df7f271a5e61c20bcd36a1|
	\SystemRoot\system32\DRIVERS\klim5.sys ("C:\WINDOWS\system32\drivers\klim5.sys") File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  12:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:49, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  19:27, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:50, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  19:27, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:49, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
	\SystemRoot\system32\DRIVERS\psched.sys ("C:\WINDOWS\system32\drivers\psched.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  19:26, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  19:26, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 23/08/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 23/08/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\rdpdr.sys ("C:\WINDOWS\system32\drivers\rdpdr.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  19:02, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:43, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 14/04/2008  00:51, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  19:09, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 14/04/2008  00:51, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40576, File modification date = 13/04/2008  19:27, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-204520038|0x6215023940cfd3702b46abc304e1d45a|
	\SystemRoot\system32\drivers\viahduaa.sys ("C:\WINDOWS\system32\drivers\viahduaa.sys") File version = 6,0,01,1520 built by: WinDDK, File size = 874880, File modification date = 16/09/2008  15:20, File description = VIA High Definition Audio Function Driver, Product Name = VIA High Definition Audio Driver, Product version = 6,0,01,1520, Company name = VIA Technologies, Inc. ( Microsoft Corporation. All rights reserved.) |596645202|0xf59b9da1fde462a662c84a0f279c0693|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 146048, File modification date = 13/04/2008  19:49, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1339121702|0xe82a496c3961efc6828b508c310ce98f|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60160, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1772042113|0x6cb08593487f5701d2d2254e693eafce|
	\SystemRoot\system32\drivers\monfilt.sys ("C:\WINDOWS\system32\drivers\monfilt.sys") File version = 5.10.0.4112, File size = 1389056, File modification date = 14/02/2008  09:12, File description = Creative WDM Audio Driver (32-bit), Product Name = Creative Filter Driver, Product version = 5.10.0.4112, Company name = Creative Technology Ltd. (Copyright  Creative Technology Ltd.2005) |-1670659847|0x9fa7207d1b1adead88ae8eed9cdbbaa5|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  19:15, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 23/08/2001  12:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\system32\DRIVERS\klif.sys ("C:\WINDOWS\system32\drivers\klif.sys") File version = 8.1.0.202, File size = 226832, File modification date = 08/06/2009  12:13, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1997-2009.) |1422454972|0x2627c389ba33065b2e98118ce9d71e57|
	\SystemRoot\System32\Drivers\Modem.SYS ("C:\WINDOWS\system32\drivers\modem.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 30080, File modification date = 14/04/2008  00:51, File description = Modem Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1327766427|0xdfcbad3cec1c5f964962ae10e0bcc8e1|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 23/08/2001  12:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 23/08/2001  12:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 23/08/2001  12:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  19:14, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
	\SystemRoot\System32\Drivers\mnmdd.SYS ("C:\WINDOWS\system32\drivers\mnmdd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 23/08/2001  12:00, File description = Frame buffer simulator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1594636198|0x4ae068242760a1fb6e1a44bf4e16afa6|
	\SystemRoot\System32\DRIVERS\RDPCDD.sys ("C:\WINDOWS\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 23/08/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 19072, File modification date = 13/04/2008  19:02, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2138279264|0xc941ea2454ba8350021d774daf0f1027|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 30848, File modification date = 13/04/2008  19:02, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1513111447|0x3182d64ae053d6fb034f44b6def8034a|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 23/08/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:49, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 16/09/2009  12:26, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1831242800|0xcbeebeb899e31ef52b962cb31fc8ca5c|
	\SystemRoot\system32\DRIVERS\ipnat.sys ("C:\WINDOWS\system32\drivers\ipnat.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  19:27, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
	\SystemRoot\system32\DRIVERS\netbt.sys ("C:\WINDOWS\system32\drivers\netbt.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:51, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  19:27, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  19:26, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:58, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
	\SystemRoot\System32\Drivers\PQNTDrv.SYS ("C:\WINDOWS\system32\drivers\pqntdrv.sys") File version = 8.00.000, File size = 4228, File modification date = 16/09/2002  12:14, File description = PowerQuest Boot Mode Driver., Product Name = PowerQuest product, Product version = 8.00.000, Company name = PowerQuest Corporation (Copyright(C) PowerQuest Corp. 1998-2002) |-93691310|0x4228630829c0e521c43d882a00533374|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 44544, File modification date = 13/04/2008  19:03, File description = FIPS Crypto Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1912005625|0xd45926117eb9fa946a6af572fbe1caa3|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 63744, File modification date = 13/04/2008  19:44, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-798199484|0xc885b02847f5d2fd45a24e219ed93b32|
	\SystemRoot\System32\Drivers\dump_atapi.sys
	\SystemRoot\System32\Drivers\dump_WMILIB.SYS
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.5796 (xpsp_sp3_gdr.090417-1242), File size = 1847168, File modification date = 17/04/2009  12:26, File description = Multi-User Win32 Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5796, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2110400929|0xb707ea8e261f47b51cac6fb7af7770f6|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 23/08/2001  12:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 17664, File modification date = 13/04/2008  19:15, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1513891853|0x9a10aacbfdc4922715375fb4065ec930|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 71168, File modification date = 13/04/2008  19:08, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1008970732|0xac7280566a7bb85cb3291f04ddc1198e|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 23/08/2001  12:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\igxpgd32.dll ("C:\WINDOWS\system32\igxpgd32.dll") File version = 6.14.10.4990, File size = 181760, File modification date = 11/09/2008  02:52, File description = Intel Graphics 2D Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |1806282889|0x8caab8871bf12024a906dfe32125863a|
	\SystemRoot\System32\igxprd32.dll ("C:\WINDOWS\system32\igxprd32.dll") File version = 6.14.10.4990, File size = 57344, File modification date = 11/09/2008  02:51, File description = Intel Graphics 2D Rotation Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |1399305721|0xafbdbbe5070d40d5fecad1174aa83a7c|
	\SystemRoot\System32\igxpdv32.DLL ("C:\WINDOWS\system32\igxpdv32.dll") File version = 6.14.10.4990, File size = 2352128, File modification date = 11/09/2008  02:52, File description = Component GHAL Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |-72927626|0xa4c74571e7754ed8a65303846ffa01c1|
	\SystemRoot\System32\igxpdx32.DLL ("C:\WINDOWS\system32\igxpdx32.dll") File version = 6.14.10.4990, File size = 3401216, File modification date = 11/09/2008  02:53, File description = DirectDraw(R) Driver for Intel(R) Graphics Technology, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |156367377|0x518fe7275d002127eef6901a465d58e8|
	\SystemRoot\system32\DRIVERS\tifsfilt.sys ("C:\WINDOWS\system32\drivers\tifsfilt.sys") File version = 3.3 build 443, File size = 39264, File modification date = 26/06/2009  09:01, File description = Acronis True Image File System Filter, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |-35241593|0xd352fff2a623b916c08ceacbfc8b5c32|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:47, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:45, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  19:02, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
	\SystemRoot\System32\Drivers\ParVdm.SYS ("C:\WINDOWS\system32\drivers\parvdm.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 6784, File modification date = 23/08/2001  12:00, File description = VDM Parallel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-977764727|0x70e98b3fd8e963a6a46a2e6247e0bea1|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
	\SystemRoot\System32\Drivers\HTTP.sys ("C:\WINDOWS\system32\drivers\http.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  19:23, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
	\SystemRoot\system32\DRIVERS\asyncmac.sys ("C:\WINDOWS\system32\drivers\asyncmac.sys") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  19:27, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
	\SystemRoot\system32\drivers\kmixer.sys ("C:\WINDOWS\system32\drivers\kmixer.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  19:15, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
	\SystemRoot\system32\DRIVERS\USBSTOR.SYS ("C:\WINDOWS\system32\drivers\usbstor.sys") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  19:15, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
	\SystemRoot\System32\Drivers\Fastfat.SYS ("C:\WINDOWS\system32\drivers\fastfat.sys") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 143744, File modification date = 13/04/2008  19:44, File description = Fast FAT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249227351|0x38d332a6d56af32635675f132548343e|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 1036, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 50688, File modification date = 14/04/2008  00:42, File description = Windows NT Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1435690640|0x5f816c1f539266d2d4c78694239da0b5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|

	PROCESS	csrss, PID = 1084, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 6144, File modification date = 14/04/2008  00:42, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |257561549|0x44f275c64738ea2056e3d9580c23b60f|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 52736, File modification date = 14/04/2008  00:41, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |889374799|0x42f1f4c0afb08410e5f02d4b13ebb623|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 6144, File modification date = 14/04/2008  00:42, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |257561549|0x44f275c64738ea2056e3d9580c23b60f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b40000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 32256, File modification date = 14/04/2008  00:41, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938077962|0x05b100f8dd7073bfd7b3e46d0e36ad0c|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b50000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 52736, File modification date = 14/04/2008  00:41, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |889374799|0x42f1f4c0afb08410e5f02d4b13ebb623|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b60000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 293376, File modification date = 14/04/2008  00:42, File description = Windows Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2036522752|0x1618f36d4f7f6ccceb3ee44ba95be85c|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\sxs.dll, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:42, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|

	PROCESS	winlogon, PID = 1108, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 507904, File modification date = 14/04/2008  00:42, File description = Windows NT Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1219746257|0xed0ef0a136dec83df69f04118870003e|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 507904, File modification date = 14/04/2008  00:42, File description = Windows NT Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1219746257|0xed0ef0a136dec83df69f04118870003e|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75940000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 17920, File modification date = 14/04/2008  00:42, File description = Network DDE Share Management APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123978768|0x013c1148c1ec025596896e093f60f608|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75930000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 27648, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027689378|0xfcfa1c55971cc229d353b3a15accd995|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76bc0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 49664, File modification date = 14/04/2008  00:42, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093570802|0xaf11c591f2f4aff4a6cf699d376f618b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75970000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 997376, File modification date = 14/04/2008  00:42, File description = Windows NT Logon GINA DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |609505261|0xd7b7a57c0e57c836f18cf12a4c62a1ca|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 74320000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:42, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1657068939|0x52a5a388661ff3a889593185367b7226|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\odbcint.dll, MID = b10000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 94208, File modification date = 13/04/2008  17:56, File description = Microsoft Data Access - ODBC Resources, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1903028116|0x6b7c6b32f8e84d56c6260d684019fea2|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776e0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
	  C:\WINDOWS\system32\sfc.dll, MID = 76bb0000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 5120, File modification date = 14/04/2008  00:42, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1348001263|0x96e1c926f22ee1bfbae82901a35f6bf3|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:42, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723d0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 99328, File modification date = 14/04/2008  00:42, File description = Microsoft Smart Card API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1234730488|0x02988b904c386b500cd08639c4c20eea|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:42, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\sxs.dll, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:42, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\cscdll.dll, MID = 76600000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:41, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
	  C:\WINDOWS\System32\dimsntfy.dll, MID = 47020000,  ("c:\windows\system32\dimsntfy.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 19456, File modification date = 14/04/2008  00:41, File description = DIMS Notification Handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-96338696|0xe2092f0a1d7abc243f9c2362483d150d|
	  C:\WINDOWS\system32\klogon.dll, MID = 6d4d0000,  ("c:\windows\system32\klogon.dll") File version = 8.0.0.506, File size = 218376, File modification date = 11/11/2008  15:00, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1827166753|0xa09ef6a4793948a74060c70ad423f067|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75950000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:42, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a20000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:41, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 136192, File modification date = 25/06/2009  08:25, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-657895457|0xd2dcc24acc0350bc61f14adddf99ad38|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76790000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33280, File modification date = 14/04/2008  00:41, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363977478|0x17a1d675c12bbf80caac54a4855c41d0|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 17a0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72d20000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72d10000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 23/08/2001  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bd0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:41, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|

	PROCESS	services, PID = 1156, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5f770000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 14/04/2008  00:42, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1352312310|0xec29a79f1e76dc509e24d401f29d0678|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:42, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 7dbd0000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 314880, File modification date = 14/04/2008  00:42, File description = Windows Security Configuration Editor Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1325096785|0xb24a42a413e694ad73fdfb7fbd492c31|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 123392, File modification date = 14/04/2008  00:42, File description = User-mode Plug-and-Play Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |179157249|0x2edfc2a8893435723ad80481803c6d5c|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcAdProc.dll, MID = 47260000,  ("c:\windows\apppatch\acadproc.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39424, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1840758300|0xea9ee60b408878e5f2012f9c783836db|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\eventlog.dll, MID = 77b70000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 56320, File modification date = 14/04/2008  00:41, File description = Event Logging Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1481283099|0x6d4feb43ee538fc5428cc7f0565aa656|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:42, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|

	PROCESS	lsass, PID = 1168, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75730000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 730112, File modification date = 25/06/2009  08:25, File description = LSA Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-844728851|0x6a77c91890cfe08135301574bb29559f|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:42, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74440000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 415744, File modification date = 14/04/2008  00:42, File description = SAM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1571439755|0xf05b8cdb7fe0e55dccfb1d946ce80064|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76790000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33280, File modification date = 14/04/2008  00:41, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363977478|0x17a1d675c12bbf80caac54a4855c41d0|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\msprivs.dll, MID = 4d200000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 48128, File modification date = 13/04/2008  16:53, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |97889384|0xc6bb1d1500db4a0e224cb65e6c7e8a80|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cf0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 301568, File modification date = 25/06/2009  08:25, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1646145893|0x99ea6ac9b3fee42e0438a3a24720ee3f|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 136192, File modification date = 25/06/2009  08:25, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-657895457|0xd2dcc24acc0350bc61f14adddf99ad38|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\netlogon.dll, MID = 744b0000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 407040, File modification date = 14/04/2008  00:42, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-497788752|0x1b7f071c51b77c272875c3a23e1e4550|
	  C:\WINDOWS\system32\w32time.dll, MID = 767c0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:42, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:42, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\schannel.dll, MID = 767f0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 147456, File modification date = 25/06/2009  08:25, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1407606836|0xbfdece69e293e6db4e25def862418428|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\wdigest.dll, MID = 7dfc0000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 54272, File modification date = 25/06/2009  08:25, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1852089323|0x3aaf9b35939ff9e58ccd18d41655c2fc|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\relog_ap.dll, MID = 10000000,  ("c:\windows\system32\relog_ap.dll") File version = 1,0,0,10, File size = 14368, File modification date = 16/10/2006  16:13, File description = Acronis Relogon Authentication Package, Product Name = Acronis Relogon Authentication Package, Product version = 1,0,0,10, Company name = Acronis (Copyright (C) Acronis, 2000-2005.) |1951060468|0x92904f159fe06dcb773703276d8db36b|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\scecli.dll, MID = 74410000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 181248, File modification date = 14/04/2008  00:42, File description = Windows Security Configuration Editor Client Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1916274224|0xa86bb5e61bf3e39b62ab4c7e7085a084|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743e0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 183808, File modification date = 14/04/2008  00:41, File description = Windows IPSec SPD Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |272523589|0x332760fba1655fcfd35bd6f4fd871300|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75d90000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 270336, File modification date = 14/04/2008  00:42, File description = Oakley Key Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1032466659|0x33ceb89b62589e8b12aee9e2d523dade|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74370000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 32256, File modification date = 14/04/2008  00:42, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1414615888|0x248712ea6ba17b9ff0c542a3828375dd|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 743a0000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 34304, File modification date = 14/04/2008  00:42, File description = Protected storage server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1256118844|0x853d0d0c6f02d7bfdf1cf99dd7553732|
	  C:\WINDOWS\system32\psbase.dll, MID = 743c0000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:42, File description = Protected Storage default provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1561976406|0x22d89d84e8e081cda529dbf8c0255a38|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 138752, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1930455596|0xfede68bf80052bad393afd5c2e60dcb0|

	PROCESS	svchost, PID = 1352, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  c:\windows\system32\rpcss.dll, MID = 76a80000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  c:\windows\system32\termsrv.dll, MID = 760f0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:42, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
	  c:\windows\system32\ICAAPI.dll, MID = 74f70000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 11264, File modification date = 14/04/2008  00:41, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1148796443|0xdf6551e4c4c46655a0c76194f1fcea5d|
	  c:\windows\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\windows\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  c:\windows\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  c:\windows\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  c:\windows\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  c:\windows\system32\mstlsapi.dll, MID = 75110000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 116224, File modification date = 14/04/2008  00:42, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |374101092|0x2d65d56c2f8b6cc5ebff8e7200c30304|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:41, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  c:\windows\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:41, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  c:\windows\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  c:\windows\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76bc0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 49664, File modification date = 14/04/2008  00:42, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093570802|0xaf11c591f2f4aff4a6cf699d376f618b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|

	PROCESS	svchost, PID = 1444, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\rpcss.dll, MID = 76a80000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:42, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|

	PROCESS	svchost, PID = 1560, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\shsvcs.dll, MID = 776e0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\System32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  c:\windows\system32\dhcpcsvc.dll, MID = 7d4b0000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:41, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
	  c:\windows\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  c:\windows\system32\schedsvc.dll, MID = 77300000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:42, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
	  c:\windows\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:42, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:42, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\System32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c70000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 136192, File modification date = 25/06/2009  08:25, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-657895457|0xd2dcc24acc0350bc61f14adddf99ad38|
	  C:\WINDOWS\System32\cryptdll.dll, MID = 76790000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33280, File modification date = 14/04/2008  00:41, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363977478|0x17a1d675c12bbf80caac54a4855c41d0|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f50000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 6656, File modification date = 14/04/2008  00:42, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-206752993|0xe47e364c96467fd54fa44d59f927c3ab|
	  C:\WINDOWS\System32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\System32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\System32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\System32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  c:\windows\system32\audiosrv.dll, MID = 708b0000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:41, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
	  c:\windows\system32\wkssvc.dll, MID = 76e40000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.5826 (xpsp_sp3_gdr.090609-1434), File size = 132096, File modification date = 10/06/2009  06:14, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5826, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1022959651|0xa8888a5327621856c0cec4e385f69309|
	  c:\windows\system32\qmgr.dll, MID = 5b9f0000,  ("c:\windows\system32\qmgr.dll") File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:42, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  c:\windows\system32\SHFOLDER.dll, MID = 76780000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:42, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2146833819|0xc14aa05881a35b6d6bb8d55b117ee22d|
	  c:\windows\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5727 (xpsp_sp3_gdr.081215-1359), File size = 354304, File modification date = 16/12/2008  12:30, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5727, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-440784333|0xf2ba72ba07ca78f4aa4afddd9c3ab792|
	  c:\windows\system32\cryptsvc.dll, MID = 76ce0000,  ("c:\windows\system32\cryptsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
	  c:\windows\system32\certcli.dll, MID = 77b90000,  ("c:\windows\system32\certcli.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 194560, File modification date = 14/04/2008  00:41, File description = Microsoft Certificate Services Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |918846200|0x00709952d444eae14dbbd30d36fbae0f|
	  c:\windows\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  c:\windows\system32\CRYPTUI.dll, MID = 754d0000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 512512, File modification date = 14/04/2008  00:41, File description = Microsoft Trust UI Provider, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2087176561|0x6e4be11d50f8a8de2bad644c9c9de8d3|
	  C:\WINDOWS\system32\WININET.dll, MID = 3d930000,  ("c:\windows\system32\wininet.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 915456, File modification date = 03/07/2009  17:09, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |915281667|0x7e8a47a2e6561274b83e257ce74803fd|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 17b0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 07/01/2009  13:20, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1208832, File modification date = 03/07/2009  17:09, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1337669976|0x2fabfc08ea56b0ec4388a68c314c03a2|
	  C:\WINDOWS\system32\iertutil.dll, MID = 3dfd0000,  ("c:\windows\system32\iertutil.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1985536, File modification date = 03/07/2009  17:09, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719144143|0x803a6176020d97e68704b211bfe7d255|
	  c:\windows\system32\ESENT.dll, MID = 606b0000,  ("c:\windows\system32\esent.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 1082368, File modification date = 14/04/2008  00:41, File description = Server Database Storage Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1441214508|0xf5b754cdea20bbb3a31e16a776ede6d6|
	  c:\windows\system32\dmserver.dll, MID = 74f90000,  ("c:\windows\system32\dmserver.dll") File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:41, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f40000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:42, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
	  c:\windows\system32\srsvc.dll, MID = 751a0000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:42, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
	  c:\windows\system32\POWRPROF.dll, MID = 74ad0000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 17408, File modification date = 14/04/2008  00:42, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662701231|0x50a166237a0fa771261275a405646cc0|
	  c:\windows\system32\seclogon.dll, MID = 73d20000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:42, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  c:\windows\system32\srvsvc.dll, MID = 75090000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:42, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
	  c:\windows\system32\es.dll, MID = 77710000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  c:\windows\system32\netman.dll, MID = 77d00000,  ("c:\windows\system32\netman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:42, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
	  c:\windows\system32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:41, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:41, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  c:\windows\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:41, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  c:\windows\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:42, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  c:\windows\system32\netshell.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:42, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  c:\windows\system32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:41, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  c:\windows\system32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:41, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  c:\windows\system32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:41, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  c:\windows\system32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:42, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  c:\windows\system32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:41, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  c:\windows\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:42, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  c:\windows\system32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:41, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|
	  c:\windows\system32\RASAPI32.dll, MID = 76ee0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 237056, File modification date = 14/04/2008  00:42, File description = Remote Access API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1996513756|0x92c4f48b62b0b876194584c3ff09ccb6|
	  c:\windows\system32\rasman.dll, MID = 76e90000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:42, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |402120582|0x4def926f6a0545ae486a03c84f2ee482|
	  c:\windows\system32\TAPI32.dll, MID = 76eb0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 181760, File modification date = 14/04/2008  00:42, File description = Microsoft Windows(TM) Telephony API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-741300903|0x00aabf131b4823785818db99a075a313|
	  c:\windows\system32\WZCSAPI.DLL, MID = 73030000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 52736, File modification date = 14/04/2008  00:51, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1800689210|0x767ff54a552732ce772c2302025fa82f|
	  c:\windows\system32\WZCSvc.DLL, MID = 7db10000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:51, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
	  c:\windows\system32\WMI.dll, MID = 76d30000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 5632, File modification date = 14/04/2008  00:41, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-719986125|0x7b0770526801f05d58c51a3dfb87b4bd|
	  c:\windows\system32\EapolQec.dll, MID = 72810000,  ("c:\windows\system32\eapolqec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 30720, File modification date = 14/04/2008  00:41, File description = Microsoft EAPOL NAP Enforcement Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1377493183|0xe6ef7bc927d9f8f9ba1584bfc39e0c6f|
	  c:\windows\system32\QUtil.dll, MID = 726c0000,  ("c:\windows\system32\qutil.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 76800, File modification date = 14/04/2008  00:42, File description = Quarantine Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1351838941|0x8ae93aacc648921baacb8602991ac4b3|
	  c:\windows\system32\ersvc.dll, MID = 74f80000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:41, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
	  c:\windows\system32\w32time.dll, MID = 767c0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:42, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
	  c:\windows\system32\trkwks.dll, MID = 75070000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:42, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:42, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 1809944, File modification date = 16/10/2008  09:13, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1738765924|0x84a03bfe004b06e93408618976dc9c14|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:42, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75150000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 60416, File modification date = 14/04/2008  00:41, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1315966031|0xf9d3c78cfe15271d80790677c893ce45|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 600a0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 29696, File modification date = 14/04/2008  00:42, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1268464976|0xb85e95679b5adc12311bcd3f5385d623|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 59490000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753e0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 430592, File modification date = 14/04/2008  00:42, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493584733|0xacacb8b14e66109b8acd6644b5574b9a|
	  c:\windows\system32\sens.dll, MID = 722d0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:42, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
	  c:\windows\system32\wscsvc.dll, MID = 4c0a0000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:42, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
	  c:\windows\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:42, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75290000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 214528, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025270981|0xd95c71052e5ef63b55997fb31483d02f|
	  C:\WINDOWS\System32\Wbem\wbemcore.dll, MID = 762c0000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 531456, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1304806609|0xf0bf811622f2dd6c8e26ee4600d83731|
	  C:\WINDOWS\System32\Wbem\esscli.dll, MID = 75310000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 247808, File modification date = 14/04/2008  00:41, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-247386360|0xe4616430709f440cf1809d88dc2366ea|
	  C:\WINDOWS\System32\Wbem\FastProx.dll, MID = 75690000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 473600, File modification date = 09/02/2009  12:10, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1459080511|0x378a0aefb11d8b0dc8c27b9f7604b88d|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74ed0000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 43520, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1136134851|0x010472d0ae758227c6f6e6933549c219|
	  C:\WINDOWS\System32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:42, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 75020000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 95232, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1977307769|0x3273d1565bf30225c115b480a3bb2c9d|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 75200000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 178176, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |429912748|0x942a17d2901a31ea68627cbffcd268cc|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 76620000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.702, File size = 1267200, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-1401764672|0xed0c0df222209e43ad9afbf3fe87dde0|
	  C:\WINDOWS\system32\colbact.DLL, MID = 75130000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.700, File size = 60416, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |337038552|0x690d97864735e8ecd87f55777e266690|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750f0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.706, File size = 66560, File modification date = 12/06/2008  14:23, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |683422442|0x36795a645eaa47fe31d2a8f136a2c69b|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:42, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d10000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 58368, File modification date = 14/04/2008  00:41, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1710517156|0xdf82e222578dbe59fcbbd69a02e4c806|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 750b0000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 58880, File modification date = 14/04/2008  00:42, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1768974486|0xf51ebb6fc536a6b2d588fd668d3a8249|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 3f1e0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 453120, File modification date = 09/02/2009  12:10, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-775629617|0x071143f687b4f887e21461ca6cc7eb29|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5f770000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 14/04/2008  00:42, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1352312310|0xec29a79f1e76dc509e24d401f29d0678|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75390000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 273920, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556445984|0x26d881d27cbe51d3614e68d7313ea026|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5f740000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 47104, File modification date = 14/04/2008  00:42, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1166824097|0xd26451b540720a7313a9bcbe794daf62|
	  C:\WINDOWS\System32\sfc.dll, MID = 76bb0000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 5120, File modification date = 14/04/2008  00:42, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1348001263|0x96e1c926f22ee1bfbae82901a35f6bf3|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:42, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  c:\windows\system32\ipnathlp.dll, MID = 66460000,  ("c:\windows\system32\ipnathlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:41, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
	  c:\windows\system32\AUTHZ.dll, MID = 776c0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-679073198|0x714705f29a917993536a6ab2dedb0b7f|
	  c:\windows\system32\browser.dll, MID = 76da0000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:41, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
	  C:\WINDOWS\system32\upnp.dll, MID = 76de0000,  ("c:\windows\system32\upnp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 133632, File modification date = 14/04/2008  00:42, File description = Universal Plug and Play API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1575648411|0x93c088c2aeb2f23e720bda7e32bd5117|
	  C:\WINDOWS\system32\SSDPAPI.dll, MID = 74f00000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34816, File modification date = 14/04/2008  00:42, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1379733117|0x3d075865dcc26931972f6476ad0497be|
	  C:\WINDOWS\system32\netcfgx.dll, MID = 755f0000,  ("c:\windows\system32\netcfgx.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 622592, File modification date = 14/04/2008  00:42, File description = Network Configuration Objects, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742651555|0x37a62c6092aadd2efde0468dd8818e99|
	  C:\WINDOWS\System32\rasmans.dll, MID = 7df30000,  ("c:\windows\system32\rasmans.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:42, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
	  C:\WINDOWS\System32\WINIPSEC.DLL, MID = 74370000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 32256, File modification date = 14/04/2008  00:42, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1414615888|0x248712ea6ba17b9ff0c542a3828375dd|
	  c:\windows\system32\tapisrv.dll, MID = 733e0000,  ("c:\windows\system32\tapisrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:42, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
	  c:\windows\system32\PSAPI.DLL, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\System32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\System32\rastapi.dll, MID = 75880000,  ("c:\windows\system32\rastapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 58368, File modification date = 14/04/2008  00:42, File description = Remote Access TAPI Compliance Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-250933167|0x5f7692cec90e2e9aa32cd58321e234b8|
	  C:\WINDOWS\System32\unimdm.tsp, MID = 57cc0000,  ("c:\windows\system32\unimdm.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 206848, File modification date = 14/04/2008  00:42, File description = Unimodem 5 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-532993221|0xaace07fe34fadddf973ce068a6424957|
	  C:\WINDOWS\System32\uniplat.dll, MID = 72000000,  ("c:\windows\system32\uniplat.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:42, File description = Unimodem AT Mini Driver Platform Driver for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-129377103|0x995252fcc4692b5b97ee17d596c9386e|
	  C:\WINDOWS\System32\unimdmat.dll, MID = 5b070000,  ("c:\windows\system32\unimdmat.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 74240, File modification date = 14/04/2008  00:42, File description = Unimodem Service Provider AT Mini Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-54461730|0x19ae6cba05b9005698a6dedcc88f202e|
	  C:\WINDOWS\system32\modemui.dll, MID = 61650000,  ("c:\windows\system32\modemui.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 153600, File modification date = 14/04/2008  00:41, File description = Windows Modem Properties, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2142845677|0xfe4a73cdbc882a19d070f1c01586e81a|
	  C:\WINDOWS\System32\kmddsp.tsp, MID = 57d40000,  ("c:\windows\system32\kmddsp.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33280, File modification date = 14/04/2008  00:42, File description = TAPI Kernel-Mode Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1995.  All Rights Reserved.) |511159877|0x76ec97c5068d3d9faa7774b0f659d31a|
	  C:\WINDOWS\System32\ndptsp.tsp, MID = 57d20000,  ("c:\windows\system32\ndptsp.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 56832, File modification date = 14/04/2008  00:42, File description = NDIS Proxy TAPI Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1997.  All Rights Reserved.) |-1849609816|0x4589963d84f2984fa5949a72162ba4f4|
	  C:\WINDOWS\System32\ipconf.tsp, MID = 57d50000,  ("c:\windows\system32\ipconf.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 17408, File modification date = 14/04/2008  00:42, File description = Microsoft Multicast Conference TAPI Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-195151459|0x8b8a45df7cef36d93c7bd3e4c84003b8|
	  C:\WINDOWS\System32\h323.tsp, MID = 57d70000,  ("c:\windows\system32\h323.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 265728, File modification date = 14/04/2008  00:42, File description = Microsoft H.323 Telephony Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-119032191|0x8bc2b02dc11c98d14cee43b8e8393ff3|
	  C:\WINDOWS\System32\hidphone.tsp, MID = 57d60000,  ("c:\windows\system32\hidphone.tsp") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 29696, File modification date = 14/04/2008  00:42, File description = Microsoft HID Phone TSP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-322754116|0x6b552ed3bee5aa3c4560478ff779ba98|
	  C:\WINDOWS\System32\HID.DLL, MID = 688f0000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 14/04/2008  00:51, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2011900532|0x8973122796e3b5d6b5900fc186e55fea|
	  C:\WINDOWS\System32\rasppp.dll, MID = 72240000,  ("c:\windows\system32\rasppp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 210944, File modification date = 14/04/2008  00:42, File description = Remote Access PPP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |963005772|0xd0545a010ed2259a740c8414899a938f|
	  C:\WINDOWS\System32\ntlsapi.dll, MID = 724b0000,  ("c:\windows\system32\ntlsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 8192, File modification date = 14/04/2008  00:42, File description = Microsoft License Server Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1778743022|0xb464bd425d5d09abe4192234d1577b22|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cf0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 301568, File modification date = 25/06/2009  08:25, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1646145893|0x99ea6ac9b3fee42e0438a3a24720ee3f|
	  C:\WINDOWS\System32\RASQEC.DLL, MID = 72ae0000,  ("c:\windows\system32\rasqec.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61952, File modification date = 14/04/2008  00:42, File description = RAS Quarantine Enforcement Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1093243760|0xa655c88aa555bb8ef8957bd29408827f|
	  C:\WINDOWS\System32\raschap.dll, MID = 76bd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 79872, File modification date = 14/04/2008  00:42, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369945370|0xed43f00cd77e72483a8625ac4f32d8d8|
	  C:\WINDOWS\System32\rastls.dll, MID = 76b70000,  ("c:\windows\system32\rastls.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 150016, File modification date = 14/04/2008  00:42, File description = Remote Access PPP EAP-TLS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |683497955|0x036d3962f2086bf2a98e2873ce153828|
	  C:\WINDOWS\System32\SCHANNEL.dll, MID = 767f0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 147456, File modification date = 25/06/2009  08:25, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1407606836|0xbfdece69e293e6db4e25def862418428|
	  C:\WINDOWS\System32\WinSCard.dll, MID = 723d0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 99328, File modification date = 14/04/2008  00:42, File description = Microsoft Smart Card API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1234730488|0x02988b904c386b500cd08639c4c20eea|
	  C:\WINDOWS\System32\RASDLG.dll, MID = 768d0000,  ("c:\windows\system32\rasdlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 658432, File modification date = 14/04/2008  00:42, File description = Remote Access Common Dialog API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1224370499|0x401a8c0be0baa7d7a470f0942244152d|
	  C:\WINDOWS\system32\upnphost.dll, MID = 62bf0000,  ("c:\windows\system32\upnphost.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:42, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  C:\WINDOWS\System32\xactsrv.dll, MID = 72080000,  ("c:\windows\system32\xactsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 91648, File modification date = 14/04/2008  00:42, File description = Downlevel API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2003396906|0x18473f44d6de85c8cb4e70f503c5ea64|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:42, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d40000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.5512 (xpsp.080413-2113), File size = 98304, File modification date = 14/04/2008  00:41, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1424813738|0x912b67bb8249925a5c972fc5839eae09|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73d30000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 71680, File modification date = 14/04/2008  00:42, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1472036770|0x6404807abc7af52fa3792697ae638b50|

	PROCESS	svchost, PID = 1620, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k NetworkService
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\dnsrslvr.dll, MID = 76770000,  ("c:\windows\system32\dnsrslvr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:41, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
	  c:\windows\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\MPRAPI.dll, MID = 76d40000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 87040, File modification date = 14/04/2008  00:41, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |556453914|0xea5b8beca3f279c757578cd7f1e95855|
	  C:\WINDOWS\system32\ACTIVEDS.dll, MID = 77cc0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 193536, File modification date = 14/04/2008  00:41, File description = ADs Router Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100745567|0x2cdae321b8e878a278ba2d2fa013060b|
	  C:\WINDOWS\system32\adsldpc.dll, MID = 76e10000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 143360, File modification date = 14/04/2008  00:41, File description = ADs LDAP Provider C DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |287301440|0x0d84657dbf93db98673defdf2b29e25a|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:42, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\rsaenh.dll, MID = 68000000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.5507 (xpsp.080318-1711), File size = 208384, File modification date = 13/04/2008  18:07, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5507, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1027485300|0x54dae3ea34802b4ed9ae1c6b1209fa56|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|

	PROCESS	svchost, PID = 1708, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\lmhsvc.dll, MID = 74c40000,  ("c:\windows\system32\lmhsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:41, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
	  c:\windows\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  c:\windows\system32\alrsvc.dll, MID = 70f80000,  ("c:\windows\system32\alrsvc.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:41, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
	  c:\windows\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  c:\windows\system32\ssdpsrv.dll, MID = 765e0000,  ("c:\windows\system32\ssdpsrv.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:42, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  c:\windows\system32\upnphost.dll, MID = 62bf0000,  ("c:\windows\system32\upnphost.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:42, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
	  c:\windows\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5727 (xpsp_sp3_gdr.081215-1359), File size = 354304, File modification date = 16/12/2008  12:30, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5727, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-440784333|0xf2ba72ba07ca78f4aa4afddd9c3ab792|
	  c:\windows\system32\SSDPAPI.dll, MID = 74f00000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34816, File modification date = 14/04/2008  00:42, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1379733117|0x3d075865dcc26931972f6476ad0497be|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74980000,  ("c:\windows\system32\msxml3.dll") File version = 8.100.1048.0, File size = 1106944, File modification date = 04/09/2008  17:15, File description = MSXML 3.0 SP10, Product Name = Microsoft(R) MSXML 3.0 SP10, Product version = 8.100.1048.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |44511650|0x9fc3049701123bb618976f01f5702b00|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1208832, File modification date = 03/07/2009  17:09, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1337669976|0x2fabfc08ea56b0ec4388a68c314c03a2|
	  C:\WINDOWS\system32\iertutil.dll, MID = 3dfd0000,  ("c:\windows\system32\iertutil.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1985536, File modification date = 03/07/2009  17:09, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719144143|0x803a6176020d97e68704b211bfe7d255|
	  C:\WINDOWS\system32\httpapi.dll, MID = 67570000,  ("c:\windows\system32\httpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:41, File description = HTTP Protocol Stack API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-65895855|0x144840418c0b702852f269ea6faa8c17|
	  C:\WINDOWS\system32\udhisapi.dll, MID = 5b270000,  ("c:\windows\system32\udhisapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26624, File modification date = 14/04/2008  00:42, File description = UPnP Device Host ISAPI Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2142820183|0x053582991ffde38fc470d6ed7133a297|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:42, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:42, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|

	PROCESS	spoolsv, PID = 1768, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:42, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:42, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742e0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 14/04/2008  00:42, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1935663032|0x79e3a8c328e7e569c32b0998377d9742|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fc0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 7680, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |984864463|0x6f9bef24c578d5d6740e080bedd6a448|
	  C:\WINDOWS\system32\localspl.dll, MID = 75bb0000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.5809 (xpsp_sp3_gdr.090507-1329), File size = 345600, File modification date = 07/05/2009  15:32, File description = Local Spooler DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5809, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1390054962|0xaa897735d5ab916297a6823a9b2d61b1|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c60000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 140288, File modification date = 14/04/2008  00:42, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |695097648|0x6b5db6789177a4fd0debc248041d0739|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\winspool.drv, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:42, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 742a0000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 47104, File modification date = 14/04/2008  00:51, File description = Langage Monitor for Canon Bubble-Jet Printer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2082, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1431918685|0x5d3d1ab0ef4ea55b731863050482c111|
	  C:\WINDOWS\system32\mdimon.dll, MID = a50000,  ("c:\windows\system32\mdimon.dll") File version = 11.3.8166.2, File size = 28040, File modification date = 09/04/2007  08:23, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.8166.2, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2006) |1381189912|0x322fd75a97dba67fc8f97a9957f857f1|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:42, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74280000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15360, File modification date = 14/04/2008  00:51, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2068458146|0x222de7f5edb9ddbe628384a1a8be59ce|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 72400000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 45568, File modification date = 14/04/2008  00:42, File description = Standard TCP/IP Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1967385716|0xae0382ad9c73d343d85e1a50c80b7c20|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723f0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 16896, File modification date = 14/04/2008  00:42, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936044745|0xf26385e8ba4549b5186b774ec0e45d86|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll, MID = a60000,  ("c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll") File version = 11.3.8166.2, File size = 28552, File modification date = 09/04/2007  08:23, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.8166.2, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2006) |311034668|0xea8647a21bcb56c5f15712d4b7407501|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fb0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:42, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75c10000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 102400, File modification date = 14/04/2008  00:42, File description = 32-bit Spooler API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-681651438|0x22dd6d7d4bfe2b8ce705cc950c8aea4c|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:42, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 767a0000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 67072, File modification date = 14/04/2008  00:42, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1317983993|0xec4c0d9bfd9f7e33f8b395ad54e13063|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\inetpp.dll, MID = 74300000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 14/04/2008  00:41, File description = Internet Print Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1753129315|0xee4c651a217b01d636b5364ac77da892|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1010000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|

	PROCESS	hkcmd, PID = 512, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\hkcmd.exe" 
		  "c:\windows\system32\hkcmd.exe" File version = 6.14.10.4990, File size = 178712, File modification date = 16/09/2008  06:01, File description = hkcmd Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1598280509|0x4c4ca68cb5a9797a20d00cdcfc7c0266|
	  C:\WINDOWS\system32\hkcmd.exe, MID = 400000,  ("c:\windows\system32\hkcmd.exe") File version = 6.14.10.4990, File size = 178712, File modification date = 16/09/2008  06:01, File description = hkcmd Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1598280509|0x4c4ca68cb5a9797a20d00cdcfc7c0266|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\hccutils.DLL, MID = 10000000,  ("c:\windows\system32\hccutils.dll") File version = 6.14.10.4990, File size = 106496, File modification date = 11/09/2008  02:16, File description = hccutils Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |2093137092|0xf524ca7dd941042e2d10b2b0366c0692|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = ae0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\igfxsrvc.dll, MID = aa0000,  ("c:\windows\system32\igfxsrvc.dll") File version = 6.14.10.4990, File size = 52224, File modification date = 11/09/2008  02:16, File description = igfxsrvc Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-811664068|0x4ecaa414b41ffd6760815184a4afe4bd|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\igfxrRUS.lrc, MID = 11a0000,  ("c:\windows\system32\igfxrrus.lrc") File version = 6.14.10.4990, File size = 266240, File modification date = 11/09/2008  02:20, File description = igfxres Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-981562558|0xf28f1c679a295190b92dfbfc12355e39|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	igfxpers, PID = 520, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\igfxpers.exe" 
		  "c:\windows\system32\igfxpers.exe" File version = 6.14.10.4990, File size = 150040, File modification date = 16/09/2008  06:02, File description = persistence Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1414957722|0x34d7282bfaf1a0a7e2b95eae301426fb|
	  C:\WINDOWS\system32\igfxpers.exe, MID = 400000,  ("c:\windows\system32\igfxpers.exe") File version = 6.14.10.4990, File size = 150040, File modification date = 16/09/2008  06:02, File description = persistence Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1414957722|0x34d7282bfaf1a0a7e2b95eae301426fb|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = b60000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\igfxsrvc.dll, MID = 10000000,  ("c:\windows\system32\igfxsrvc.dll") File version = 6.14.10.4990, File size = 52224, File modification date = 11/09/2008  02:16, File description = igfxsrvc Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-811664068|0x4ecaa414b41ffd6760815184a4afe4bd|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:42, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	TrueImageMonitor, PID = 568, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe" 
		  "c:\program files\acronis\trueimagehome\trueimagemonitor.exe" File version = 10,0,0,4871, File size = 1184024, File modification date = 16/10/2006  17:03, File description = Acronis True Image Monitor, Product Name = Acronis True Image, Product version = 10,0,0,4871, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |-1383299924|0x10d1742f0f8d8b526678513a4aac3d0f|
	  C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe, MID = 400000,  ("c:\program files\acronis\trueimagehome\trueimagemonitor.exe") File version = 10,0,0,4871, File size = 1184024, File modification date = 16/10/2006  17:03, File description = Acronis True Image Monitor, Product Name = Acronis True Image, Product version = 10,0,0,4871, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |-1383299924|0x10d1742f0f8d8b526678513a4aac3d0f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\MSVCP71.dll, MID = 7c3a0000,  ("c:\windows\system32\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 16/10/2006  00:15, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 16/10/2006  00:15, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\Program Files\Common Files\Acronis\Common\gc.dll, MID = 10000000,  ("c:\program files\common files\acronis\common\gc.dll") File version = (null), File size = 50720, File modification date = 16/10/2006  15:49, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1172687249|0x34751c0b41b939b50fc06f0438a4ec0c|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\Program Files\Common Files\Acronis\Common\rpc_client.dll, MID = fe0000,  ("c:\program files\common files\acronis\common\rpc_client.dll") File version = 1,0,0,122, File size = 13856, File modification date = 16/10/2006  15:50, File description = Acronis Dynamic RPC Client, Product Name = Acronis Dynamic RPC Client, Product version = 1,0,0,122, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |-421818583|0x7aa46e65fc00baf00c8b66c8220bd366|

	PROCESS	TimounterMonitor, PID = 432, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe" 
		  "c:\program files\acronis\trueimagehome\timountermonitor.exe" File version = 3.3 build 443, File size = 1959904, File modification date = 16/10/2006  17:07, File description = Monitor for Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |310693648|0x27572ef75528cac20c72849656378dad|
	  C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe, MID = 400000,  ("c:\program files\acronis\trueimagehome\timountermonitor.exe") File version = 3.3 build 443, File size = 1959904, File modification date = 16/10/2006  17:07, File description = Monitor for Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |310693648|0x27572ef75528cac20c72849656378dad|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 16/10/2006  00:15, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\MSVCP71.dll, MID = 7c3a0000,  ("c:\windows\system32\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 16/10/2006  00:15, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\hhctrl.ocx, MID = 7e4b0000,  ("c:\windows\system32\hhctrl.ocx") File version = 5.2.3790.4110 (srv03_sp2_qfe.070702-2345), File size = 545280, File modification date = 14/04/2008  00:39, File description = Microsoft HTML Help Control, Product Name = HTML Help, Product version = 5.2.3790.4110, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457045480|0x22d71d1db6fc789a1ce8ac6963580259|
	  C:\WINDOWS\system32\mui\0419\hhctrlui.dll, MID = 68e70000,  ("c:\windows\system32\mui\0419\hhctrlui.dll") File version = 4.74.9273, File size = 88064, File modification date = 05/12/2001  12:00, File description =    Microsoft HTML Help, Product Name = HTML Help, Product version = 4.74.9273, Company name =  Microsoft (  Microsoft ) |-1431531217|0x3532999205cee50988bc27bf42743fc5|
	  C:\WINDOWS\system32\msimg32.dll, MID = 76380000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 4608, File modification date = 14/04/2008  00:42, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1879070734|0xaffc87e2501fce8f09d4c10ba6421ccf|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	igfxsrvc, PID = 636, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\system32\igfxsrvc.exe -Embedding
		  "c:\windows\system32\igfxsrvc.exe" File version = 6.14.10.4990, File size = 256536, File modification date = 16/09/2008  06:02, File description = igfxsrvc Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |1594595460|0x85aac6a5ebc8537b26b3653c9883f76c|
	  C:\WINDOWS\system32\igfxsrvc.exe, MID = 400000,  ("c:\windows\system32\igfxsrvc.exe") File version = 6.14.10.4990, File size = 256536, File modification date = 16/09/2008  06:02, File description = igfxsrvc Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |1594595460|0x85aac6a5ebc8537b26b3653c9883f76c|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = c70000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\igfxsrvc.dll, MID = 10000000,  ("c:\windows\system32\igfxsrvc.dll") File version = 6.14.10.4990, File size = 52224, File modification date = 11/09/2008  02:16, File description = igfxsrvc Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-811664068|0x4ecaa414b41ffd6760815184a4afe4bd|
	  C:\WINDOWS\system32\igfxdev.dll, MID = 1300000,  ("c:\windows\system32\igfxdev.dll") File version = 6.14.10.4990, File size = 217088, File modification date = 11/09/2008  02:15, File description = igfxdev Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |1924084130|0x851f49a6d60b74bebf9b6795bf1b5694|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	schedhlp, PID = 692, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" 
		  "c:\program files\common files\acronis\schedule2\schedhlp.exe" File version = 1,0,0,237, File size = 87584, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler Helper, Product Name = Acronis Scheduler Helper, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |-342761375|0xb58b2fb12b02cad161b318ee7880f372|
	  C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe, MID = 400000,  ("c:\program files\common files\acronis\schedule2\schedhlp.exe") File version = 1,0,0,237, File size = 87584, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler Helper, Product Name = Acronis Scheduler Helper, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |-342761375|0xb58b2fb12b02cad161b318ee7880f372|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 16/10/2006  00:15, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\MSVCP71.dll, MID = 7c3a0000,  ("c:\windows\system32\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 16/10/2006  00:15, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|

	PROCESS	ctfmon, PID = 812, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\ctfmon.exe" 
		  "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:42, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
	  C:\WINDOWS\system32\ctfmon.exe, MID = 400000,  ("c:\windows\system32\ctfmon.exe") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:42, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\MSUTB.dll, MID = 5fc10000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 195072, File modification date = 14/04/2008  00:42, File description = MSUTB Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |967891665|0x17aa58a54c00f1746b8654c050491f43|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|

	PROCESS	svchost, PID = 1488, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\webclnt.dll, MID = 5a6e0000,  ("c:\windows\system32\webclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:42, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
	  C:\WINDOWS\system32\WININET.dll, MID = 3d930000,  ("c:\windows\system32\wininet.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 915456, File modification date = 03/07/2009  17:09, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |915281667|0x7e8a47a2e6561274b83e257ce74803fd|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 700000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 07/01/2009  13:20, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1208832, File modification date = 03/07/2009  17:09, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1337669976|0x2fabfc08ea56b0ec4388a68c314c03a2|
	  C:\WINDOWS\system32\iertutil.dll, MID = 3dfd0000,  ("c:\windows\system32\iertutil.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1985536, File modification date = 03/07/2009  17:09, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719144143|0x803a6176020d97e68704b211bfe7d255|
	  c:\windows\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  c:\windows\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|

	PROCESS	schedul2, PID = 1540, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe"
		  "c:\program files\common files\acronis\schedule2\schedul2.exe" File version = 1,0,0,237, File size = 230944, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler 2, Product Name = Acronis Scheduler 2, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |1385271407|0x93e118b465160d9d01907ea3350353ca|
	  C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe, MID = 400000,  ("c:\program files\common files\acronis\schedule2\schedul2.exe") File version = 1,0,0,237, File size = 230944, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler 2, Product Name = Acronis Scheduler 2, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |1385271407|0x93e118b465160d9d01907ea3350353ca|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|

	PROCESS	jqs, PID = 1664, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
		  "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
		  "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 43481, File modification date = 10/06/2009  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1278862412|0x04f4e9849f47161638aaaf96faf6dd98|
	  C:\Program Files\Java\jre6\bin\jqs.exe, MID = 400000,  ("c:\program files\java\jre6\bin\jqs.exe") File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\Program Files\Java\jre6\bin\MSVCR71.dll, MID = 7c340000,  ("c:\program files\java\jre6\bin\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 10/06/2009  04:53, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\pdh.dll, MID = 74000000,  ("c:\windows\system32\pdh.dll") File version = 5.1.2600.5773 (xpsp_sp3_gdr.090306-1225), File size = 284160, File modification date = 06/03/2009  14:22, File description = Windows Performance Data Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5773, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1968693974|0x62cf83a6989312a0dd39bbffb3d1c166|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 74320000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:42, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1657068939|0x52a5a388661ff3a889593185367b7226|
	  C:\WINDOWS\system32\odbcbcp.dll, MID = 711a0000,  ("c:\windows\system32\odbcbcp.dll") File version = 2000.085.1132.00 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:42, File description = Microsoft BCP for ODBC, Product Name = Microsoft SQL Server, Product version = 3.85.1132, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1990-2000) |904815961|0x369f7b1a4f358b976176556a1a331f36|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\odbcint.dll, MID = 830000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1132.0 (xpsp.080413-0852), File size = 94208, File modification date = 13/04/2008  17:56, File description = Microsoft Data Access - ODBC Resources, Product Name = Microsoft Data Access Components, Product version = 3.525.1132.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |1903028116|0x6b7c6b32f8e84d56c6260d684019fea2|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|
	  C:\WINDOWS\system32\perfos.dll, MID = 5e760000,  ("c:\windows\system32\perfos.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:42, File description = Windows System Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1616743010|0xacdafcd14ec0ece89198503746a5c147|
	  C:\WINDOWS\system32\perfdisk.dll, MID = 5e790000,  ("c:\windows\system32\perfdisk.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 26624, File modification date = 14/04/2008  00:42, File description = Windows Disk Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-832696454|0xabfb673b24a9b3287761d497529fb5b9|

	PROCESS	MDM, PID = 1732, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
		  "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  18:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE, MID = 400000,  ("c:\program files\common files\microsoft shared\vs7debug\mdm.exe") File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  18:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = cc0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|

	PROCESS	svchost, PID = 1996, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost.exe -k imgsvc
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  c:\windows\system32\wiaservc.dll, MID = 75aa0000,  ("c:\windows\system32\wiaservc.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:42, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
	  c:\windows\system32\CFGMGR32.dll, MID = 74ae0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 16896, File modification date = 14/04/2008  00:39, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932683950|0x5f0ce62e0831cf972ec6949fd3e37da7|
	  c:\windows\system32\setupapi.DLL, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  c:\windows\system32\mscms.dll, MID = 73b30000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), File size = 74240, File modification date = 24/06/2008  16:43, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5627, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-107861231|0x4ac2fa4a6f0df2511bac13393c06eff1|
	  c:\windows\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:42, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  c:\windows\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  c:\windows\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d40000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.5512 (xpsp.080413-2113), File size = 98304, File modification date = 14/04/2008  00:41, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1424813738|0x912b67bb8249925a5c972fc5839eae09|
	  C:\WINDOWS\system32\sti.dll, MID = 73ba0000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 68096, File modification date = 14/04/2008  00:42, File description = Still Image Devices client DLL , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |510110898|0x3caeae7608f1bd7ba873a3b02895b106|

	PROCESS	alg, PID = 2784, USER = , Command Line = C:\WINDOWS\System32\alg.exe
		  "c:\windows\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	  C:\WINDOWS\System32\alg.exe, MID = 1000000,  ("c:\windows\system32\alg.exe") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\System32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\WSOCK32.dll, MID = 71ad0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 22528, File modification date = 14/04/2008  00:42, File description = Windows Socket 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1410508832|0x67156d5a9ac356dc99d7bccb388e3316|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\System32\MSWSOCK.DLL, MID = 71a50000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 7e0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 662b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 344064, File modification date = 14/04/2008  00:41, File description = Home Networking Configuration Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1774878382|0x3cb32d3b8cbe79899d63280bb7a83cd9|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a90000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19456, File modification date = 14/04/2008  00:42, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-179093881|0x4e3d06d6e68eedb52565080f55b460d3|

	PROCESS	svchost, PID = 3196, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\Administrators, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k HTTPFilter
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77690000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 118784, File modification date = 14/04/2008  00:42, File description = Windows NT MARTA provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |905726061|0x549290dbc280c887681d7652978dbbe0|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 760000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  c:\windows\system32\w3ssl.dll, MID = 5aa90000,  ("c:\windows\system32\w3ssl.dll") File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:42, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
	  C:\WINDOWS\System32\strmfilt.dll, MID = 6f290000,  ("c:\windows\system32\strmfilt.dll") File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 75776, File modification date = 14/04/2008  00:42, File description = Stream Filter Library, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1357513435|0xe5786e13f8c86427a2062c009eed4ed9|
	  C:\WINDOWS\System32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\System32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\System32\HTTPAPI.dll, MID = 67570000,  ("c:\windows\system32\httpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 24576, File modification date = 14/04/2008  00:41, File description = HTTP Protocol Stack API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-65895855|0x144840418c0b702852f269ea6faa8c17|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|

	PROCESS	explorer, PID = 3996, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\explorer.exe" 
		  "c:\windows\explorer.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:42, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
	  C:\WINDOWS\explorer.exe, MID = 1000000,  ("c:\windows\explorer.exe") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:42, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f80000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e290000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 754d0000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 512512, File modification date = 14/04/2008  00:41, File description = Microsoft Trust UI Provider, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2087176561|0x6e4be11d50f8a8de2bad644c9c9de8d3|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\WININET.dll, MID = 3d930000,  ("c:\windows\system32\wininet.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 915456, File modification date = 03/07/2009  17:09, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |915281667|0x7e8a47a2e6561274b83e257ce74803fd|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 400000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 07/01/2009  13:20, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\urlmon.dll, MID = 78130000,  ("c:\windows\system32\urlmon.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1208832, File modification date = 03/07/2009  17:09, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1337669976|0x2fabfc08ea56b0ec4388a68c314c03a2|
	  C:\WINDOWS\system32\iertutil.dll, MID = 3dfd0000,  ("c:\windows\system32\iertutil.dll") File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 1985536, File modification date = 03/07/2009  17:09, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719144143|0x803a6176020d97e68704b211bfe7d255|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f60000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 172032, File modification date = 14/04/2008  00:42, File description = Win32 LDAP API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1001296557|0x0492cf5870f0e616b0c71695a433d162|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a20000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:41, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 76600000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:41, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
	  C:\WINDOWS\system32\themeui.dll, MID = 5ba60000,  ("c:\windows\system32\themeui.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:42, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76380000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 4608, File modification date = 14/04/2008  00:42, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1879070734|0xaffc87e2501fce8f09d4c10ba6421ccf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 13f0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d40000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.5512 (xpsp.080413-2113), File size = 98304, File modification date = 14/04/2008  00:41, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1424813738|0x912b67bb8249925a5c972fc5839eae09|
	  C:\WINDOWS\system32\msutb.dll, MID = 5fc10000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 195072, File modification date = 14/04/2008  00:42, File description = MSUTB Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |967891665|0x17aa58a54c00f1746b8654c050491f43|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76980000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 19968, File modification date = 14/04/2008  00:41, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-615224053|0x2dc5a8019e2387987905f77c664e4be2|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76990000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:42, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f60000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:41, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |331693154|0x2de1190196ee9555db548a57622022eb|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71c10000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 44032, File modification date = 14/04/2008  00:42, File description = Microsoft Lan Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1703319395|0x36468087e22c57a83df758b3f90df73f|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cd0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:42, File description = NT LM UI Common Code - GUI Classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-286856417|0xac5df42fe314c1446b1dad237bfcffe0|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c90000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 245760, File modification date = 14/04/2008  00:42, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |841396087|0xed5a816d8e11e03f1937ac3c56826ee4|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:42, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f70000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:41, File description = Web DAV Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |325003362|0xfb8f8eec8d9c2157789472dd61cdc78b|
	  C:\WINDOWS\system32\NETSHELL.dll, MID = 76400000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:42, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
	  C:\WINDOWS\system32\credui.dll, MID = 76c00000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 163840, File modification date = 14/04/2008  00:41, File description = Credential Manager User Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1279314299|0x235892e493845d64d890163cfef90e97|
	  C:\WINDOWS\system32\dot3api.dll, MID = 478c0000,  ("c:\windows\system32\dot3api.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 26112, File modification date = 14/04/2008  00:41, File description = 802.3 Autoconfiguration API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1249934243|0x8e2cc37ba87d8f681066e0e9c8a19f73|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e80000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44032, File modification date = 14/04/2008  00:42, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |248169745|0x876ccf164e08d6b903cd14398e056dd2|
	  C:\WINDOWS\system32\dot3dlg.dll, MID = 736d0000,  ("c:\windows\system32\dot3dlg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 9216, File modification date = 14/04/2008  00:41, File description = 802.3 UI Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1232452496|0x4e8f3230bac8c1caadf01a8c728e1c5c|
	  C:\WINDOWS\system32\OneX.DLL, MID = 5dca0000,  ("c:\windows\system32\onex.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 144384, File modification date = 14/04/2008  00:42, File description = IEEE 802.1X supplicant library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050946570|0xca04959077afe36369d37b3504740c87|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f50000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 18432, File modification date = 14/04/2008  00:42, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |744667940|0x0e2735281fbb9a764d5584c2a5dcba59|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76360000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 53760, File modification date = 14/04/2008  00:42, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932523436|0x430ceb794f6e6ef8ac86958c242366d6|
	  C:\WINDOWS\system32\eappcfg.dll, MID = 745b0000,  ("c:\windows\system32\eappcfg.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:41, File description = Eap Peer Config, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1649637859|0x5db625e7d095604010cf84de2d8acfa6|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76080000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 14/04/2008  00:42, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |-687080704|0xf404830f3cd9bf8f2515e489c0cda297|
	  C:\WINDOWS\system32\eappprxy.dll, MID = 5dcd0000,  ("c:\windows\system32\eappprxy.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 40960, File modification date = 14/04/2008  00:41, File description = Microsoft EAPHost Peer Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1376466316|0xabc4206543450c0666d152f4b65833b8|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d60000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 94720, File modification date = 14/04/2008  00:41, File description = IP Helper API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456070684|0xaf07dc9b7cc455629e732340c7b15f3a|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:42, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\ieframe.dll, MID = 3e1c0000,  ("c:\windows\system32\ieframe.dll") File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
	  C:\WINDOWS\system32\wpdshserviceobj.dll, MID = 164a0000,  ("c:\windows\system32\wpdshserviceobj.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 15/11/2008  04:19, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d4f0000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.5727 (xpsp_sp3_gdr.081215-1359), File size = 354304, File modification date = 16/12/2008  12:30, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5727, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-440784333|0xf2ba72ba07ca78f4aa4afddd9c3ab792|
	  C:\WINDOWS\system32\webcheck.dll, MID = 2650000,  ("c:\windows\system32\webcheck.dll") File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75cf0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 586240, File modification date = 14/04/2008  00:41, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1719027136|0xb714735c12a70171de28657948fd91f1|
	  C:\WINDOWS\system32\stobject.dll, MID = 76280000,  ("c:\windows\system32\stobject.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 121856, File modification date = 14/04/2008  00:42, File description = Systray shell service object, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-505515755|0x50512fc9b7878e3c2c147bc17326a7db|
	  C:\WINDOWS\system32\BatMeter.dll, MID = 74af0000,  ("c:\windows\system32\batmeter.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 29184, File modification date = 14/04/2008  00:41, File description = Battery Meter Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |481886046|0x231a0b0e3ba7abfe469a8262faa1fd71|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74ad0000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 17408, File modification date = 14/04/2008  00:42, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662701231|0x50a166237a0fa771261275a405646cc0|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\mydocs.dll, MID = 72410000,  ("c:\windows\system32\mydocs.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:42, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
	  C:\WINDOWS\system32\portabledevicetypes.dll, MID = 109c0000,  ("c:\windows\system32\portabledevicetypes.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 166912, File modification date = 15/11/2008  04:19, File description = Windows Portable Device (Parameter) Types Component, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |186518969|0x22358578cb321f3325496a3723029409|
	  C:\WINDOWS\system32\portabledeviceapi.dll, MID = 10930000,  ("c:\windows\system32\portabledeviceapi.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 284160, File modification date = 15/11/2008  04:19, File description = Windows Portable Device API Components, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-387235283|0x9d45b2201d0ecf9f42136c7b99deb8b2|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72d20000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72d10000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 23/08/2001  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bd0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:41, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|
	  C:\Program Files\Internet Explorer\mui\0419\browselc.dll, MID = 3a0000,  ("c:\program files\internet explorer\mui\0419\browselc.dll") File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 66048, File modification date = 05/12/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |1042319667|0x826818a3169eae686fa99832bcb566e2|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, MID = 10000000,  ("c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll") File version = 9.1.0.2009022700, File size = 75128, File modification date = 27/02/2009  07:07, File description = Adobe PDF Helper for Internet Explorer, Product Name = AcroIEHelperShim Library, Product version = 9.1.0.2009022700, Company name = Adobe Systems Incorporated (Copyright 1984-2009 Adobe Systems Incorporated and its licensors. All rights reserved.) |1984669723|0x5cf6190cd875da6b35256fee573e7908|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll, MID = 2a80000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll") File version = 8.00.50727.762, File size = 626688, File modification date = 01/12/2006  17:54, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |412186895|0xe4fece18310e23b1d8fee993e35e7a6f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll") File version = 8.00.50727.762, File size = 548864, File modification date = 01/12/2006  17:54, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.762, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1359536405|0x4c8a880eabc0b4d462cc4b2472116ea1|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, MID = 2b20000,  ("c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll") File version = 9.1.0.2009022700, File size = 61816, File modification date = 27/02/2009  07:07, File description = Adobe PDF Helper for Internet Explorer, Product Name = AcroIEHelper Library, Product version = 9.1.0.2009022700, Company name = Adobe Systems Incorporated (Copyright 1984-2009 Adobe Systems Incorporated and its licensors. All rights reserved.) |-21423697|0xece58a352984777519d4937e41871b4c|
	  C:\PROGRA~1\FlashGet\jccatch.dll, MID = 2b40000,  ("c:\program files\flashget\jccatch.dll") File version = 1, 1, 4, 0, File size = 65536, File modification date = 16/01/2002  14:12, File description = jccatch Module, Product Name = jccatch Module, Product version = 1, 1, 4, 0, Company name = Amaze Soft (Copyright 1999 by Amaze Soft) |-1313945717|0xf2fafe3cb6412c89f43d88ccebe308f3|
	  C:\WINDOWS\system32\SXS.DLL, MID = 7e720000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 713216, File modification date = 14/04/2008  00:42, File description = Fusion 2.5, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1657259287|0x694503348b586e99d56c0e30ab5b3ef8|
	  C:\WINDOWS\system32\DUSER.dll, MID = 6c1b0000,  ("c:\windows\system32\duser.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 304128, File modification date = 14/04/2008  00:41, File description = Windows DirectUser Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1517075071|0x3d41a9326f0376fc73af961dd23b1fb1|
	  C:\WINDOWS\system32\sti.dll, MID = 73ba0000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 68096, File modification date = 14/04/2008  00:42, File description = Still Image Devices client DLL , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |510110898|0x3caeae7608f1bd7ba873a3b02895b106|
	  C:\WINDOWS\system32\CFGMGR32.dll, MID = 74ae0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 16896, File modification date = 14/04/2008  00:39, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-932683950|0x5f0ce62e0831cf972ec6949fd3e37da7|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  01:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.RUS, MID = 3160000,  ("c:\program files\common files\adobe\acrobat\activex\pdfshell.rus") File version = 9.1.0.2009022700, File size = 311296, File modification date = 27/02/2009  14:20, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 9.1.0.2009022700, Company name = Adobe Systems, Inc. (Copyright 1984-2009 Adobe Systems Incorporated and its licensors. All rights reserved.) |-217158777|0x7058f08e331ceef216688fc0759ae0d0|

	PROCESS	GetSystemInfo, PID = 3112, USER = USER01\Natalya (Group - USER01\None, , USER01\Debugger Users, BUILTIN\Administrators, BUILTIN\Users, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "H:\GetSystemInfo.exe" 
		  "h:\getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 02/07/2008  08:31, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  H:\GetSystemInfo.exe, MID = 400000,  ("h:\getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 02/07/2008  08:31, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 714752, File modification date = 09/02/2009  12:10, File description = NT Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1457998901|0x911ddf2e16761643a47225f654d811e5|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317), File size = 989696, File modification date = 21/03/2009  14:06, File description = Windows NT BASE API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5781, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1979381531|0xb921fb870c9ac0d509b2ccabbbbe95f3|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e410000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 578560, File modification date = 14/04/2008  00:42, File description = Windows XP USER API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-137944476|0xb26b135ff1b9f60c9388b4a7d16f600b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), File size = 286720, File modification date = 23/10/2008  12:36, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1242124010|0x8b1f3320aebb536e021a5014409862de|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 73000000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 146432, File modification date = 14/04/2008  00:42, File description = Windows Spooler Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1494602823|0xbd83aba61e8accc8d9ffb869f29418ce|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dd0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241), File size = 585216, File modification date = 15/04/2009  14:51, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5795, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-503026509|0x2193c150de9c29649b1503093f0c6569|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305), File size = 56832, File modification date = 25/06/2009  08:25, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5834, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1023410871|0x5357826c8a8dd6a07f17c48bb45be46e|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c10000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.5512 (xpsp.080413-2111), File size = 343040, File modification date = 14/04/2008  00:42, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |192616055|0x355edbb4d412b01f1740c17e3f50fa00|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 763b0000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 276992, File modification date = 14/04/2008  00:41, File description = Common Dialogs DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-236544111|0x86987a5000dfa3ebe2275c0456bcf2fe|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d090000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.080413-2105), File size = 617472, File modification date = 14/04/2008  00:41, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1368930217|0x06f247492bc786ce5c24a23e178c711a|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 474112, File modification date = 14/04/2008  00:42, File description = Shell Light-weight Utility Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |842048312|0x72edae61e761c14714bfd0cb4ba3c0db|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b40000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 176128, File modification date = 14/04/2008  00:42, File description = MCI API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1770595978|0xf1300d0b4c40754a01df16f350f0ef60|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71ab0000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 82432, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2085723850|0x2ccc474eb85ceaa3e1fa1726580a3e5a|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71aa0000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 19968, File modification date = 14/04/2008  00:42, File description = Windows Socket 2.0 Helper for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059381398|0x9789e95e1d88eeb4b922bf3ea7779c28|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77c00000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5cb70000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 65024, File modification date = 14/04/2008  00:42, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-701624512|0x1f03103598bd817b1078dab1326dde11|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6f880000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 1852928, File modification date = 14/04/2008  00:41, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1073168034|0x310c15fd8358b2c4cd7a5b98a112883f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774e0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 1287168, File modification date = 14/04/2008  00:42, File description = Microsoft OLE for Windows, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |956879674|0xecce74bc6168375016450a86a164d976|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77120000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.5512, File size = 551936, File modification date = 14/04/2008  00:42, File description = (null), Product Name = (null), Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |518534744|0x387006cf9983000bab76dd250d424045|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77be0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 71680, File modification date = 14/04/2008  00:42, File description = Microsoft ACM Audio Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-303779226|0x2098ab52bd5316e59aa36f3437b13be6|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769c0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 727040, File modification date = 14/04/2008  00:42, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |464097926|0x43d13c80ebec0135a3611e0f616f179b|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5ad70000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 218624, File modification date = 14/04/2008  00:42, File description = Microsoft UxTheme Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1532422747|0x7a2cc3719b255e6b5d74396183b7715b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76390000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 110080, File modification date = 14/04/2008  00:41, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1052217952|0x0da85218e92526972a821587e6a8bf8f|
	  C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll, MID = 6d020000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll") File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
	  C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll, MID = 6d4c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll") File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll, MID = 773d0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll") File version = 6.0 (xpsp.080413-2105), File size = 1054208, File modification date = 14/04/2008  00:42, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |110337333|0xbd38d1ebe24a46bd3eda059560afba12|
	  C:\WINDOWS\system32\Msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4001.5512, File size = 2843136, File modification date = 14/04/2008  00:42, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-225217770|0xd3f72d50de53f9f1f55240115af4d42e|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 74720000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 297984, File modification date = 14/04/2008  00:42, File description = MSCTF Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |959176880|0xe40fcf943127ddc8fd60554b722d762b|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b40000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 125952, File modification date = 14/04/2008  00:41, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818790915|0xcf492d7e9af1c628b3536d20ef6f5cc7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 755c0000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 177152, File modification date = 14/04/2008  00:40, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832281086|0x5733177bcf16ee78b99543c9b0ab81ea|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fd0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.700, File size = 498688, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-197686785|0xf137a0ca70003db20448d540651fa003|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77050000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.700, File size = 792064, File modification date = 14/04/2008  00:41, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2038136107|0x1280a158c722fa95a80fb7aebe78fa7d|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77920000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 985088, File modification date = 14/04/2008  00:42, File description = Windows Setup API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-422240870|0x24192246760e0e64435522e246b1d6c2|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76990000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:42, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b20000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/07/2009  19:01, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-1487122469|0x224fb925c641da16ceb6d60f40ca4c75|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5b860000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), File size = 337408, File modification date = 15/10/2008  16:34, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5694, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1520100409|0x318230e845919255ef3c5d5e1e863631|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a80000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b20000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57344, File modification date = 14/04/2008  00:42, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300191495|0xa11f1ea5346165347bf54c1f959c3fbc|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c30000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 176640, File modification date = 14/04/2008  00:42, File description = Microsoft Trust Verification APIs, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1730076388|0xb25d14dcbbb6623c1a63cd07a97df32b|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c90000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 144384, File modification date = 14/04/2008  00:41, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140483543|0xca648bd638245eb83f971ff71b031bec|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b20000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 14/04/2008  00:41, File description = Multiple Provider Router DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-655953932|0xdd7bd97fb8bd800963789158a5e4b41d|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f60000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:41, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |331693154|0x2de1190196ee9555db548a57622022eb|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71c10000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 44032, File modification date = 14/04/2008  00:42, File description = Microsoft Lan Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1703319395|0x36468087e22c57a83df758b3f90df73f|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cd0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:42, File description = NT LM UI Common Code - GUI Classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-286856417|0xac5df42fe314c1446b1dad237bfcffe0|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c90000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 245760, File modification date = 14/04/2008  00:42, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |841396087|0xed5a816d8e11e03f1937ac3c56826ee4|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c80000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 11776, File modification date = 14/04/2008  00:42, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2101582325|0xb41d53899e37cc43da85da19998bee81|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bf0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 64000, File modification date = 14/04/2008  00:42, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-139790866|0x8329a39d5a402a75a74301d6a62ecda1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f70000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 25088, File modification date = 14/04/2008  00:41, File description = Web DAV Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |325003362|0xfb8f8eec8d9c2157789472dd61cdc78b|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 15f0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 2897920, File modification date = 13/04/2008  18:09, File description = Service Pack 2 Messages, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1083423919|0x16403217ab6fc5c30c14c6b12098ad4b|
	  C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.RUS, MID = 1d40000,  ("c:\program files\common files\adobe\acrobat\activex\pdfshell.rus") File version = 9.1.0.2009022700, File size = 311296, File modification date = 27/02/2009  14:20, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 9.1.0.2009022700, Company name = Adobe Systems, Inc. (Copyright 1984-2009 Adobe Systems Incorporated and its licensors. All rights reserved.) |-217158777|0x7058f08e331ceef216688fc0759ae0d0|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f20000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 147968, File modification date = 20/06/2008  17:46, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1631961519|0x5d3fde8fb2801a2041d1b965372c4928|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5e750000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 34816, File modification date = 14/04/2008  00:42, File description = Windows System Process Performance Objects DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1156794191|0x1793cc660605f63b14fb96c7707f75ba|
	  C:\WINDOWS\system32\psapi.dll, MID = 76bf0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 23040, File modification date = 14/04/2008  00:42, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975245997|0x9cfcb3ca3d83b4eaa133f0644a2c6f31|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):user01/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1444, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	TCP, LOCAL (host/address/port):user01/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):user01/0.0.0.0/2869, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1708, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	TCP, LOCAL (host/address/port):user01/127.0.0.1/1034, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 2784, Command Line = c:\windows\system32\alg.exe   "c:\windows\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
	TCP, LOCAL (host/address/port):user01/127.0.0.1/1355, REMOTE (host/address/port):user01/127.0.0.1/445(microsoft-ds), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):user01/127.0.0.1/5152, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1664, Command Line = "c:\program files\java\jre6\bin\jqs.exe" -service -config "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf"   "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
	TCP, LOCAL (host/address/port):user01/127.0.0.1/5152, REMOTE (host/address/port):user01/127.0.0.1/1303, State:CLOSE_WAIT, PID = 1664, Command Line = "c:\program files\java\jre6\bin\jqs.exe" -service -config "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf"   "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
	TCP, LOCAL (host/address/port):User01/192.168.0.1/139(netbios-ssn), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):User01/192.168.0.1/445(microsoft-ds), REMOTE (host/address/port):User02/192.168.0.2/1025, State:ESTABLISHED, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):user01/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):user01/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 1168, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	UDP, LOCAL (host/address/port):user01/0.0.0.0/1035, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):user01/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 1168, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
	UDP, LOCAL (host/address/port):user01/127.0.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):user01/127.0.0.1/1036, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):user01/127.0.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1708, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):User01/192.168.0.1/53(domain), REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):User01/192.168.0.1/67, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):User01/192.168.0.1/68, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):User01/192.168.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1560, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
	UDP, LOCAL (host/address/port):User01/192.168.0.1/137(netbios-ns), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):User01/192.168.0.1/138, REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):User01/192.168.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1708, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|

System default language:
		Russian

Default interface language of user:
		Russian

Keyboard layout languages:
		English
		Russian
		Uzbek (Cyrillic)

Installed code pages:
		10000 = 10000 (MAC - )
		10006 = 10006 (MAC -  1)
		10007 = 10007 (MAC - )
		10010 = 10010 (MAC - )
		10017 = 10017 (MAC - )
		10029 = 10029 (MAC -  2)
		10079 = 10079 (MAC - )
		10081 = 10081 (MAC - )
		10082 = 10082 (MAC - )
		1026 = 1026 (IBM EBCDIC -  (-5))
		1250 = 1250  (ANSI - -)
		1251 = 1251  (ANSI - )
		1252 = 1252  (ANSI -  1)
		1253 = 1251  (ANSI - )
		1254 = 1254  (ANSI - )
		1255 = 1255  (ANSI - )
		1256 = 1256  (ANSI - )
		1257 = 1257  (ANSI - )
		1258 = 1258  (ANSI/OEM - )
		1361 = Korean (Johab)
		20127 = 20127 (-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 ( - 8)
		21866 = 21866 ( - 8-U)
		28591 = 28591 (ISO 8859-1  1)
		28592 = 28592 (ISO 8859-2 )
		28594 = 28594 (ISO 8859-4 )
		28595 = 28595 (ISO 8859-5 )
		28597 = 28597 (ISO 8859-7 )
		28599 = 28599 (ISO 8859-9  5)
		28605 = 28605 (ISO 8859-15  9)
		37 = 37    (IBM EBCDIC -   )
		437 = 437   (OEM - )
		500 = 500   (IBM EBCDIC - )
		737 = 737   (OEM -  437G)
		775 = 775   (OEM - )
		850 = 850   (OEM -   1)
		852 = 852   (OEM -  2)
		855 = 855   (OEM -  )
		857 = 857   (OEM - )
		860 = 860   (OEM - )
		861 = 861   (OEM - )
		863 = 863   (OEM - -)
		865 = 865   (OEM - )
		866 = 866   (OEM - )
		869 = 869   (OEM -  )
		874 = 874   (ANSI/OEM - )
		875 = 875   (IBM EBCDIC -  )
		932 = 932   (ANSI/OEM -  Shift-JIS)
		936 = 936   (ANSI/OEM -   GBK)
		949 = 949   (ANSI/OEM - )
		950 = 950   (ANSI/OEM -   Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
BAT FILES
  c:\autoexec.bat
      "c:\keyrus.com" File version = (null), File size = 22714, File modification date = 17/09/1995  21:32, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |770886106|0x0dc6f280a979327547172d3641e360b5|
  %SystemDrive%\autoexec.bat
      "c:\keyrus.com" File version = (null), File size = 22714, File modification date = 17/09/1995  21:32, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |770886106|0x0dc6f280a979327547172d3641e360b5|
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 45568, File modification date = 23/08/2001  12:00, File description = DrWatson Postmortem Debugger, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1881984478|0xc9f5e1de6da983e89e714ed80c11f000|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1033728, File modification date = 14/04/2008  00:42, File description = Windows Explorer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |249860015|0x12896823fb95bfb3dc9b46bcaedc9923|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 26112, File modification date = 14/04/2008  00:42, File description = Userinit Logon Application, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |854273166|0xa93aee1928a9d7ce3e16d24ec7380f89|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 599040, File modification date = 14/04/2008  00:41, File description = Crypto API32, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-263306471|0xbdaaf79dd63f194434d31a74b9bb8b77|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 64512, File modification date = 14/04/2008  00:41, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-93686787|0xc14350fc0d47d806699c4f907fc6785b|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 101888, File modification date = 14/04/2008  00:41, File description = Offline Network Agent, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1274539501|0x515a7fae2070c2b0242b2353443e2f11|
    DllName=%SystemRoot%\System32\dimsntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy>
      "C:\WINDOWS\system32\dimsntfy.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 19456, File modification date = 14/04/2008  00:41, File description = DIMS Notification Handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-96338696|0xe2092f0a1d7abc243f9c2362483d150d|
    DllName=igfxdev.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui>
      "c:\windows\system32\igfxdev.dll" File version = 6.14.10.4990, File size = 217088, File modification date = 11/09/2008  02:15, File description = igfxdev Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |1924084130|0x851f49a6d60b74bebf9b6795bf1b5694|
    DllName=C:\WINDOWS\system32\klogon.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon>
      "c:\windows\system32\klogon.dll" File version = 8.0.0.506, File size = 218376, File modification date = 11/11/2008  15:00, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1827166753|0xa09ef6a4793948a74060c70ad423f067|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 20480, File modification date = 14/04/2008  00:42, File description = Secondary Logon Service Notification DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1423237457|0x63ff9068e5bda0bc9ecd38fbbb216e24|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 92672, File modification date = 14/04/2008  00:42, File description = Common DLL to receive Winlogon notifications, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1982301859|0x2cc34e8bb667eef78899546e12649196|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    IgfxTray=C:\WINDOWS\system32\igfxtray.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\igfxtray.exe" File version = 6.14.10.4990, File size = 150040, File modification date = 16/09/2008  06:02, File description = igfxTray Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |1124271904|0x828697d5b00abbca2f506485f66e3157|
    HotKeysCmds=C:\WINDOWS\system32\hkcmd.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\hkcmd.exe" File version = 6.14.10.4990, File size = 178712, File modification date = 16/09/2008  06:01, File description = hkcmd Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1598280509|0x4c4ca68cb5a9797a20d00cdcfc7c0266|
    Persistence=C:\WINDOWS\system32\igfxpers.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\igfxpers.exe" File version = 6.14.10.4990, File size = 150040, File modification date = 16/09/2008  06:02, File description = persistence Module, Product Name = Intel(R) Common User Interface, Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright 1999-2006, Intel Corporation) |-1414957722|0x34d7282bfaf1a0a7e2b95eae301426fb|
    NeroFilterCheck=C:\WINDOWS\system32\NeroCheck.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\nerocheck.exe" File version = 1, 0, 0, 2, File size = 155648, File modification date = 09/07/2001  06:50, File description = NeroCheck, Product Name = Ahead Software Gmbh NeroCheck, Product version = 1, 0, 0, 2, Company name = Ahead Software Gmbh (Copyright  2001) |845539794|0x3e4c03cefad8de135263236b61a49c90|
    AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.521, File size = 208616, File modification date = 29/07/2009  04:52, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.521, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-2136785022|0x24419db0ad42b68caffa6bf903be364a|
    TrueImageMonitor.exe=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\acronis\trueimagehome\trueimagemonitor.exe" File version = 10,0,0,4871, File size = 1184024, File modification date = 16/10/2006  17:03, File description = Acronis True Image Monitor, Product Name = Acronis True Image, Product version = 10,0,0,4871, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |-1383299924|0x10d1742f0f8d8b526678513a4aac3d0f|
    AcronisTimounterMonitor=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\acronis\trueimagehome\timountermonitor.exe" File version = 3.3 build 443, File size = 1959904, File modification date = 16/10/2006  17:07, File description = Monitor for Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |310693648|0x27572ef75528cac20c72849656378dad|
    Acronis Scheduler2 Service="C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\common files\acronis\schedule2\schedhlp.exe" File version = 1,0,0,237, File size = 87584, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler Helper, Product Name = Acronis Scheduler Helper, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |-342761375|0xb58b2fb12b02cad161b318ee7880f372|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:42, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
    ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe <HKEY_USERS\S-1-5-21-515967899-602609370-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:42, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 15360, File modification date = 14/04/2008  00:42, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-894724431|0x5f1d5f88303d4a4dbc8e5f97ba967cc3|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:41, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet001\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 167936, File modification date = 14/04/2008  00:41, File description = Software installation Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1503623780|0xd8849f77c0b66226335a59d26cb4edc6|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:41, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:42, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:41, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:41, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:41, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:41, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
    ServiceDll=%SystemRoot%\System32\dot3svc.dll <HKLM\System\ControlSet001\Services\Dot3svc\Parameters>
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:41, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ServiceDll=%SystemRoot%\System32\eapsvc.dll <HKLM\System\ControlSet001\Services\EapHost\Parameters>
      "C:\WINDOWS\system32\eapsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33792, File modification date = 14/04/2008  00:41, File description = Microsoft EAPHost service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-185064511|0x2187855a7703adef0cef9ee4285182cc|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:41, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:42, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
    ServiceDll=%SystemRoot%\System32\kmsvc.dll <HKLM\System\ControlSet001\Services\hkmsvc\Parameters>
      "C:\WINDOWS\system32\kmsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:41, File description = Key Management Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |20109844|0x8878bd685e490239777bfe51320b88e9|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:42, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\LanmanServer\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:42, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.5826 (xpsp_sp3_gdr.090609-1434), File size = 132096, File modification date = 10/06/2009  06:14, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5826, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1022959651|0xa8888a5327621856c0cec4e385f69309|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:41, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33792, File modification date = 14/04/2008  00:42, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1628291654|0x986b1ff5814366d71e0ac5755c88f2d3|
    ServiceDll=%SystemRoot%\System32\qagentrt.dll <HKLM\System\ControlSet001\Services\napagent\Parameters>
      "C:\WINDOWS\system32\qagentrt.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 291328, File modification date = 14/04/2008  00:42, File description = Quarantine Agent Service Run-Time, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-154644759|0x0102140028fad045756796e1c685d695|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:42, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.5512, File size = 435200, File modification date = 14/04/2008  00:42, File description = Removable Storage Manager, Product Name = Microsoft Windows Whistler Operating System, Product version = 5.1.2400.5512, Company name = Microsoft Corporation (Copyright  2000 Microsoft Corporation) |-82139176|0x156f64a3345bd23c600655fb4d10bc08|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88576, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2064900991|0xad188be7bdf94e8df4ca0a55c00a5073|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:42, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 53248, File modification date = 14/04/2008  00:41, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1783184438|0x7e699ff5f59b5d9de5390e3c34c67cf5|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet001\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:42, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:42, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:42, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:42, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:41, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:42, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:42, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:42, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:42, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:42, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:42, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:42, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:42, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:42, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
    ServiceDll=C:\WINDOWS\system32\mspmsnsv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 15/11/2008  04:19, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet001\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:42, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:42, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet001\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:51, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 129024, File modification date = 14/04/2008  00:42, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1787440249|0x295d21f14c335b53cb8154e5b1f892b9|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 17408, File modification date = 14/04/2008  00:41, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |796689220|0xa9a3daa780ca6c9671a19d52456705b4|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet002\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 167936, File modification date = 14/04/2008  00:41, File description = Software installation Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1503623780|0xd8849f77c0b66226335a59d26cb4edc6|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 42496, File modification date = 14/04/2008  00:41, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745326101|0xdef7a7882bec100fe0b2ce2549188f9d|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.7.2600.5512 (xpsp.080413-2108), File size = 409088, File modification date = 14/04/2008  00:42, File description = Background Intelligent Transfer Service, Product Name = Microsoft Windows Operating System, Product version = 6.7.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1390567835|0x574738f61fca2935f5265dc4e5691314|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 77824, File modification date = 14/04/2008  00:41, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |938368859|0xa06ce3399d16db864f55faeb1f1927a9|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 62464, File modification date = 14/04/2008  00:41, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |995219148|0x3d4e199942e29207970e04315d02ad3b|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 126976, File modification date = 14/04/2008  00:41, File description = DHCP Client Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1374818413|0x5e38d7684a49cacfb752b046357e0589|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.5512.503.0, File size = 23552, File modification date = 14/04/2008  00:41, File description = Logical Disk Manager service dll, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp. (Copyright 1985-2000 Microsoft Corp.  All rights reserved.) |-1404916928|0x57edec2e5f59f0335e92f35184bc8631|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 45568, File modification date = 14/04/2008  00:41, File description = DNS Caching Resolver Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1805186786|0x474b4dc3983173e4b4c9740b0dac98a6|
    ServiceDll=%SystemRoot%\System32\dot3svc.dll <HKLM\System\ControlSet002\Services\Dot3svc\Parameters>
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:41, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ServiceDll=%SystemRoot%\System32\eapsvc.dll <HKLM\System\ControlSet002\Services\EapHost\Parameters>
      "C:\WINDOWS\system32\eapsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 33792, File modification date = 14/04/2008  00:41, File description = Microsoft EAPHost service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-185064511|0x2187855a7703adef0cef9ee4285182cc|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:41, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1057875591|0xbc93b4a066477954555966d77fec9ecb|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.706, File size = 253952, File modification date = 07/07/2008  20:26, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1934042738|0xd4991d98f2db73c60d042f1aef79efae|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 38400, File modification date = 14/04/2008  00:42, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-998202768|0x4fcca060dfe0c51a09dd5c3843888bcd|
    ServiceDll=%SystemRoot%\System32\kmsvc.dll <HKLM\System\ControlSet002\Services\hkmsvc\Parameters>
      "C:\WINDOWS\system32\kmsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 61440, File modification date = 14/04/2008  00:41, File description = Key Management Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |20109844|0x8878bd685e490239777bfe51320b88e9|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.5512 (xpsp.080413-0852), File size = 15872, File modification date = 14/04/2008  00:42, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-296297561|0x6100a808600f44d999cebdef8841c7a3|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\LanmanServer\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 96768, File modification date = 14/04/2008  00:42, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-801204908|0xf385f4b02c535bffe1d70cab80838123|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.5826 (xpsp_sp3_gdr.090609-1434), File size = 132096, File modification date = 10/06/2009  06:14, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5826, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1022959651|0xa8888a5327621856c0cec4e385f69309|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 13824, File modification date = 14/04/2008  00:41, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710960911|0xa7db739ae99a796d91580147e919cc59|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 33792, File modification date = 14/04/2008  00:42, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1628291654|0x986b1ff5814366d71e0ac5755c88f2d3|
    ServiceDll=%SystemRoot%\System32\qagentrt.dll <HKLM\System\ControlSet002\Services\napagent\Parameters>
      "C:\WINDOWS\system32\qagentrt.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 291328, File modification date = 14/04/2008  00:42, File description = Quarantine Agent Service Run-Time, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-154644759|0x0102140028fad045756796e1c685d695|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 198144, File modification date = 14/04/2008  00:42, File description = Network Connections Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |63743024|0x13e67b55b3abd7bf3fe7aae5a0f9a9de|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.5512, File size = 435200, File modification date = 14/04/2008  00:42, File description = Removable Storage Manager, Product Name = Microsoft Windows Whistler Operating System, Product version = 5.1.2400.5512, Company name = Microsoft Corporation (Copyright  2000 Microsoft Corporation) |-82139176|0x156f64a3345bd23c600655fb4d10bc08|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 88576, File modification date = 14/04/2008  00:42, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2064900991|0xad188be7bdf94e8df4ca0a55c00a5073|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 186368, File modification date = 14/04/2008  00:42, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-34548591|0x76a9a3cbeadd68cc57cda5e1d7448235|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 53248, File modification date = 14/04/2008  00:41, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1783184438|0x7e699ff5f59b5d9de5390e3c34c67cf5|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet002\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 59904, File modification date = 14/04/2008  00:42, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-929730325|0x5b19b557b0c188210a56a6b699d90b8f|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 192512, File modification date = 14/04/2008  00:42, File description = Task Scheduler Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |252406723|0x0a9a7365a1ca4319aa7c1d6cd8e4eafa|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18944, File modification date = 14/04/2008  00:42, File description = Secondary Logon Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-930269696|0xcbe612e2bb6a10e3563336191eda1250|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 39424, File modification date = 14/04/2008  00:42, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1983130045|0x7fdd5d0684eca8c1f68b4d99d124dcd0|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 331264, File modification date = 14/04/2008  00:41, File description = Microsoft NAT Helper Components, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1002022761|0x83f41d0d89645d7235c051ab1d9523ac|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 171008, File modification date = 14/04/2008  00:42, File description = System Restore Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435143097|0x3805df0ac4296a34ba4bf93b346cc378|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 71680, File modification date = 14/04/2008  00:42, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-712688865|0x0a5679b3714edab99e357057ee88fca6|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 333824, File modification date = 14/04/2008  00:42, File description = Still Image Devices Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522766869|0x8bad69cbac032d4bbacfce0306174c30|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 249856, File modification date = 14/04/2008  00:42, File description = Microsoft Windows(TM) Telephony Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1469564798|0x3cb78c17bb664637787c9a1c98f79c38|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 295424, File modification date = 14/04/2008  00:42, File description = Terminal Server Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-528033152|0xff3477c03be7201c294c35f684b3479f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 135168, File modification date = 14/04/2008  00:42, File description = Windows Shell Services Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1333859565|0x1926899bf9ffe2602b63074971700412|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 90112, File modification date = 14/04/2008  00:42, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1954686205|0x55bca12f7f523d35ca3cb833c725f54e|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 185856, File modification date = 14/04/2008  00:42, File description = UPnP Device Host, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |159954055|0x1ebafeb9a3fbdc41b8d9c7f0f687ad91|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 175104, File modification date = 14/04/2008  00:42, File description = Windows Time Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878471759|0x54af4b1d5459500ef0937f6d33b1914f|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68096, File modification date = 14/04/2008  00:42, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-443123913|0x77a354e28153ad2d5e120a5a8687bc06|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 144896, File modification date = 14/04/2008  00:42, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1655017631|0x2d0e4ed081963804ccc196a0929275b5|
    ServiceDll=C:\WINDOWS\system32\mspmsnsv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 15/11/2008  04:19, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet002\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 617472, File modification date = 09/02/2009  12:10, File description = Advanced Windows 32 Base API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-922586062|0xe76f8807070ed04e7408a86d6d3a6137|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80896, File modification date = 14/04/2008  00:42, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-529102900|0x7c278e6408d1dce642230c0585a854d5|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.5512 (xpsp.080413-0852), File size = 6656, File modification date = 14/04/2008  00:42, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-491644476|0x35321fb577cdc98ce3eb3a3eb9e4610a|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet002\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 483840, File modification date = 14/04/2008  00:51, File description = Wireless Zero Configuration Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405887017|0x81dc3f549f44b1c1fff022dec9ecf30b|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 129024, File modification date = 14/04/2008  00:42, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1787440249|0x295d21f14c335b53cb8154e5b1f892b9|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  19:06, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
    ImagePath="C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe" <HKLM\System\ControlSet001\Services\AcrSch2Svc>
      "c:\program files\common files\acronis\schedule2\schedul2.exe" File version = 1,0,0,237, File size = 230944, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler 2, Product Name = Acronis Scheduler 2, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |1385271407|0x93e118b465160d9d01907ea3350353ca|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  17:09, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet001\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  19:27, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  19:10, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
    ImagePath=system32\DRIVERS\l251x86.sys <HKLM\System\ControlSet001\Services\AtcL002>
      "c:\windows\system32\drivers\l251x86.sys" File version = 2.5.7.15 built by: WinDDK, File size = 30720, File modification date = 17/04/2008  16:16, File description = Atheros Fast Ethernet Controller ndis miniport driver, Product Name = Atheros L2 Fast Ethernet Controller, Product version = 2.5.7.15, Company name = Atheros Communications, Inc. (2001-2006 Atheros Communications, Inc. All Rights Reserved.) |-285413688|0x83ef26c44c53581bdb67866b922aed93|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  19:21, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r <HKLM\System\ControlSet001\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.521, File size = 208616, File modification date = 29/07/2009  04:52, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.521, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-2136785022|0x24419db0ad42b68caffa6bf903be364a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  19:10, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 5632, File modification date = 14/04/2008  00:42, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1393639156|0x1cfe720eb8d93a7158a4ebc3ab178bde|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1239763571|0x34cbe729f38138217f9c80212a2a0c82|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5120, File modification date = 14/04/2008  00:42, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |478964458|0x0a9ba6af531afe7fa5e4fb973852d863|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  19:10, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.5512.503.0, File size = 224768, File modification date = 14/04/2008  00:42, File description = Logical Disk Manager service process, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |1983501827|0xe46050330bd42f33609117f861e32d3c|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  19:14, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  19:14, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 23/08/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k dot3svc <HKLM\System\ControlSet001\Services\Dot3svc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:41, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k eapsvcs <HKLM\System\ControlSet001\Services\EapHost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  19:03, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 23/08/2001  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  19:26, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
    ImagePath=system32\DRIVERS\HDAudBus.sys <HKLM\System\ControlSet001\Services\HDAudBus>
      "c:\windows\system32\drivers\hdaudbus.sys" File version = 5.10.01.5013 built by: WinDDK, File size = 144384, File modification date = 13/04/2008  17:06, File description = High Definition Audio Bus Driver v1.0a, Product Name = Microsoft Windows Operating System, Product version = 5.10.01.5013, Company name = Windows (R) Server 2003 DDK provider ( Microsoft Corporation. All rights reserved.) |-529683897|0x573c7d0a32852b48f3058cfd8026f511|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\hkmsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  19:23, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:48, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
    ImagePath=system32\DRIVERS\igxpmp32.sys <HKLM\System\ControlSet001\Services\ialm>
      "c:\windows\system32\drivers\igxpmp32.sys" File version = 6.14.10.4990, File size = 6047904, File modification date = 11/09/2008  02:52, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |-1046257959|0xd1359e54d9755d28e56b17a352ab8aae|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  19:11, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 150528, File modification date = 14/04/2008  00:42, File description = Image Mastering API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-311014|0x30deaf54a9755bb8546168cfe8a6b5e1|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  19:01, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  19:23, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 23/08/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  19:27, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  19:27, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:49, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  19:24, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  19:06, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
    ImagePath="C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" <HKLM\System\ControlSet001\Services\JavaQuickStarterService>
      "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
      "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 43481, File modification date = 10/06/2009  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1278862412|0x04f4e9849f47161638aaaf96faf6dd98|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  19:09, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet001\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  12:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
    ImagePath=system32\drivers\klbg.sys <HKLM\System\ControlSet001\Services\klbg>
      "c:\windows\system32\drivers\klbg.sys" File version = 8.0.8.2, File size = 33808, File modification date = 08/06/2009  12:13, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1479725553|0xf9089982ed97340984e3dd60edd75490|
    ImagePath=system32\DRIVERS\klfltdev.sys <HKLM\System\ControlSet001\Services\KLFLTDEV>
      "c:\windows\system32\drivers\klfltdev.sys" File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  13:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
    ImagePath=system32\DRIVERS\klif.sys <HKLM\System\ControlSet001\Services\KLIF>
      "c:\windows\system32\drivers\klif.sys" File version = 8.1.0.202, File size = 226832, File modification date = 08/06/2009  12:13, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1997-2009.) |1422454972|0x2627c389ba33065b2e98118ce9d71e57|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet001\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  12:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  19:15, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\LanmanServer>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet001\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  18:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.5512, File size = 32768, File modification date = 14/04/2008  00:42, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1996-2001) |2042102201|0xd18f1f0c101d06a1c1adf26eed16fcdd|
    ImagePath=system32\drivers\monfilt.sys <HKLM\System\ControlSet001\Services\monfilt>
      "C:\WINDOWS\system32\drivers\monfilt.sys" File version = 5.10.0.4112, File size = 1389056, File modification date = 14/02/2008  09:12, File description = Creative WDM Audio Driver (32-bit), Product Name = Creative Filter Driver, Product version = 5.10.0.4112, Company name = Creative Technology Ltd. (Copyright  Creative Technology Ltd.2005) |-1670659847|0x9fa7207d1b1adead88ae8eed9cdbbaa5|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:51, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  19:02, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.700, File size = 6144, File modification date = 14/04/2008  00:42, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |1236211169|0xa137f1470499a205abbb9aafb3b6f2b1|
    ImagePath=C:\WINDOWS\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4001.5512, File size = 78848, File modification date = 14/04/2008  00:42, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4001.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-990287589|0x5879d691e842574a20fe63817cb76df9|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  19:09, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  19:09, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  19:09, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 14/04/2008  00:51, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\napagent>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  19:27, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 14/04/2008  00:51, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:50, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  19:26, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:51, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:42, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:42, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 23/08/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 23/08/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet001\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  15:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet001\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80128, File modification date = 14/04/2008  00:51, File description = Parallel Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1231929630|0x5575faf8f97ce5e713d108c2a58d7c7c|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  19:06, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  08:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:49, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet001\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  19:26, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 23/08/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=System32\Drivers\PxHelp20.sys <HKLM\System\ControlSet001\Services\PxHelp20>
      "c:\windows\system32\drivers\pxhelp20.sys" File version = 3.00.56a, File size = 43528, File modification date = 07/03/2007  23:51, File description = Px Engine Device Driver for Windows 2000/XP, Product Name = PxHelp20, Product version = (null), Company name = Sonic Solutions (Copyright  Sonic Solutions) |-1565375476|0xd86b4a68565e444d76457f14172c875a|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 23/08/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:49, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  19:27, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 23/08/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:58, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 23/08/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet001\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  19:02, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 141312, File modification date = 14/04/2008  00:42, File description = Microsoft Remote Desktop Help Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |283819399|0x3c37bf86641bda977c3bf8a840f3b7fa|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 14/04/2008  00:10, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 75264, File modification date = 14/04/2008  00:42, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2066066351|0xaaed593f84afa419bbae8572af87cf6a|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 23/08/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 95744, File modification date = 14/04/2008  00:42, File description = Smart Card Resource Management Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |584144454|0x86d007e7a654b9a71d1d7d856b104353|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = 4.03.086, File size = 20480, File modification date = 13/04/2008  17:09, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet001\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 15744, File modification date = 13/04/2008  19:10, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885921804|0x0f29512ccd6bead730039fb4bd2c85ce|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet001\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 64512, File modification date = 13/04/2008  19:45, File description = Serial Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1099258748|0xcca207a8896d4c6a0c9ce29a4ae411a7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\snapman.sys <HKLM\System\ControlSet001\Services\snapman>
      "c:\windows\system32\drivers\snapman.sys" File version = 3.0 build 303, File size = 114048, File modification date = 26/06/2009  09:01, File description = Acronis Snapshot API, Product Name = Acronis Snapshot API, Product version = 3.0 build 303, Company name = Acronis (Copyright (c) Acronis 2000-2006) |503486824|0xe78c98378a071ce4d48a7c514fa98fa1|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:42, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
    ImagePath=\SystemRoot\system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "C:\WINDOWS\system32\drivers\sr.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  19:06, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 14/04/2008  00:51, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  19:15, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{91446CE1-0E56-4739-9293-C997E9BDA369} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 5120, File modification date = 14/04/2008  00:42, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |478964458|0x0a9ba6af531afe7fa5e4fb973852d863|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:45, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 89600, File modification date = 14/04/2008  00:42, File description = Performance Logs and Alerts Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |862147980|0xc7abbc59b43274b1109df6b24d617051|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 16/09/2009  12:26, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1831242800|0xcbeebeb899e31ef52b962cb31fc8ca5c|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:43, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tifsfilt.sys <HKLM\System\ControlSet001\Services\tifsfilter>
      "c:\windows\system32\drivers\tifsfilt.sys" File version = 3.3 build 443, File size = 39264, File modification date = 26/06/2009  09:01, File description = Acronis True Image File System Filter, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |-35241593|0xd352fff2a623b916c08ceacbfc8b5c32|
    ImagePath=system32\DRIVERS\timntr.sys <HKLM\System\ControlSet001\Services\timounter>
      "c:\windows\system32\drivers\timntr.sys" File version = 3.3 build 443, File size = 395744, File modification date = 26/06/2009  09:01, File description = Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |1366719406|0x64694b2a5c772e1c61feac300ed90ca6|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet001\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 73216, File modification date = 14/04/2008  00:42, File description = Telnet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059603438|0xdb7205804759ff62c34e3efd8a4cc76a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  19:09, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18432, File modification date = 14/04/2008  00:42, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1705983588|0x05365fb38fca1e98f7a566aaaf5d1815|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  19:15, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  19:15, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet001\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  19:15, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "C:\WINDOWS\system32\drivers\usbstor.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  19:15, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet001\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  19:15, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  19:14, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
    ImagePath=system32\drivers\viahduaa.sys <HKLM\System\ControlSet001\Services\VIAHdAudAddService>
      "c:\windows\system32\drivers\viahduaa.sys" File version = 6,0,01,1520 built by: WinDDK, File size = 874880, File modification date = 16/09/2008  15:20, File description = VIA High Definition Audio Function Driver, Product Name = VIA High Definition Audio Driver, Product version = 6,0,01,1520, Company name = VIA Technologies, Inc. ( Microsoft Corporation. All rights reserved.) |596645202|0xf59b9da1fde462a662c84a0f279c0693|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 289792, File modification date = 14/04/2008  00:42, File description = Microsoft Volume Shadow Copy Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |64155087|0x7a9db3a67c333bf0bd42e42b8596854b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  19:27, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:47, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 126464, File modification date = 14/04/2008  00:42, File description = WMI Performance Adapter Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18861181|0xe0673f1106e62a68d2257e376079f821|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet001\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 913408, File modification date = 18/10/2006  15:05, File description = Windows Media Player Network Sharing Service, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |121175657|0xf74e3d9a7fa9556c3bbb14d4e5e63d3b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet001\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet001\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet001\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 187776, File modification date = 13/04/2008  19:06, File description = ACPI Driver for NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35427716|0x8fd99680a539792a30e97944fdaecf17|
    ImagePath="C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe" <HKLM\System\ControlSet002\Services\AcrSch2Svc>
      "c:\program files\common files\acronis\schedule2\schedul2.exe" File version = 1,0,0,237, File size = 230944, File modification date = 16/10/2006  16:13, File description = Acronis Scheduler 2, Product Name = Acronis Scheduler 2, Product version = 1,0,0,237, Company name = Acronis (Copyright (C) 2000-2004 Acronis) |1385271407|0x93e118b465160d9d01907ea3350353ca|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.3142, File size = 142592, File modification date = 13/04/2008  17:09, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.3142, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-184054757|0x8bed39e3c35d6a489438b8141717a557|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236), File size = 138496, File modification date = 14/08/2008  10:04, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5657, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906351283|0x7e775010ef291da96ad17ca4b17137d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 44544, File modification date = 14/04/2008  00:42, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1306179136|0x8c515081584a38aa007909cd02020b3d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14336, File modification date = 13/04/2008  19:27, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1715682567|0xb153affac761e7f5fcfa822b9c4e97bc|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 96512, File modification date = 13/04/2008  19:10, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-413607350|0x9f3a2f5aa6875c72bf062c712cfa2674|
    ImagePath=system32\DRIVERS\l251x86.sys <HKLM\System\ControlSet002\Services\AtcL002>
      "c:\windows\system32\drivers\l251x86.sys" File version = 2.5.7.15 built by: WinDDK, File size = 30720, File modification date = 17/04/2008  16:16, File description = Atheros Fast Ethernet Controller ndis miniport driver, Product Name = Atheros L2 Fast Ethernet Controller, Product version = 2.5.7.15, Company name = Atheros Communications, Inc. (2001-2006 Atheros Communications, Inc. All Rights Reserved.) |-285413688|0x83ef26c44c53581bdb67866b922aed93|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 59904, File modification date = 13/04/2008  19:21, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1859529268|0x9916c1225104ba14794209cfa8012159|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  13:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r <HKLM\System\ControlSet002\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe" File version = 8.0.0.521, File size = 208616, File modification date = 29/07/2009  04:52, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.521, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-2136785022|0x24419db0ad42b68caffa6bf903be364a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 62976, File modification date = 13/04/2008  19:10, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1684912903|0x1f4260cc5b42272d71f79e570a27a4fe|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 5632, File modification date = 14/04/2008  00:42, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1393639156|0x1cfe720eb8d93a7158a4ebc3ab178bde|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1239763571|0x34cbe729f38138217f9c80212a2a0c82|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 36352, File modification date = 13/04/2008  19:10, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1766856817|0x044452051f3e02e7963599fc8f4f3e25|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.5512.503.0, File size = 224768, File modification date = 14/04/2008  00:42, File description = Logical Disk Manager service process, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |1983501827|0xe46050330bd42f33609117f861e32d3c|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.5512.503.0, File size = 799744, File modification date = 13/04/2008  19:14, File description = NT Disk Manager Startup Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-266727215|0xd992fe1274bde0f84ad826acae022a41|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.5512.503.0, File size = 153344, File modification date = 13/04/2008  19:14, File description = NT Disk Manager I/O Driver, Product Name = VERITAS NT Disk Manager, Product version = 1.0, Company name = Microsoft Corp., Veritas Software (Copyright  1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |333774367|0x7c824cf7bbde77d95c08005717a95f6f|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 23/08/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52864, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663410015|0x8a208dfcf89792a484e76c40e5f50b45|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k dot3svc <HKLM\System\ControlSet002\Services\Dot3svc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "C:\WINDOWS\system32\dot3svc.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 132096, File modification date = 14/04/2008  00:41, File description = Wired AutoConfig Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |852598151|0x0f0f6e687e5e15579ef4da8dd6945814|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 2944, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |853786239|0x8f5fcff8e8848afac920905fbd9d33c8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k eapsvcs <HKLM\System\ControlSet002\Services\EapHost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 129792, File modification date = 13/04/2008  19:03, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |843390506|0xb2cf4b0786f8212cb92ed2b50c6db6b0|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125056, File modification date = 23/08/2001  12:00, File description = FT Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1052792436|0x6ac26732762483366c3969c9e4d2259d|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 35072, File modification date = 13/04/2008  19:26, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-784074407|0x0a02c63c8b144bd8c86b103dee7c86a2|
    ImagePath=system32\DRIVERS\HDAudBus.sys <HKLM\System\ControlSet002\Services\HDAudBus>
      "c:\windows\system32\drivers\hdaudbus.sys" File version = 5.10.01.5013 built by: WinDDK, File size = 144384, File modification date = 13/04/2008  17:06, File description = High Definition Audio Bus Driver v1.0a, Product Name = Microsoft Windows Operating System, Product version = 5.10.01.5013, Company name = Windows (R) Server 2003 DDK provider ( Microsoft Corporation. All rights reserved.) |-529683897|0x573c7d0a32852b48f3058cfd8026f511|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\hkmsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 264832, File modification date = 13/04/2008  19:23, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25911501|0xf6aacf5bce2893e0c1754afeb672e5c9|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 52480, File modification date = 13/04/2008  19:48, File description = i8042 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1827962253|0x4a0b06aa8943c1e332520f7440c0aa30|
    ImagePath=system32\DRIVERS\igxpmp32.sys <HKLM\System\ControlSet002\Services\ialm>
      "c:\windows\system32\drivers\igxpmp32.sys" File version = 6.14.10.4990, File size = 6047904, File modification date = 11/09/2008  02:52, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4990, Company name = Intel Corporation (Copyright (c) 1998-2006 Intel Corporation.) |-1046257959|0xd1359e54d9755d28e56b17a352ab8aae|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 42112, File modification date = 13/04/2008  19:11, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-757031827|0x083a052659f5310dd8b6a6cb05edcf8e|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 150528, File modification date = 14/04/2008  00:42, File description = Image Mastering API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-311014|0x30deaf54a9755bb8546168cfe8a6b5e1|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 36352, File modification date = 13/04/2008  19:01, File description = Processor Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-35281571|0x8c953733d8f36eb2133f5bb58808b66b|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 36608, File modification date = 13/04/2008  19:23, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1485143372|0x3bb22519a194418d5fec05d800a19ad0|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 23/08/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 20864, File modification date = 13/04/2008  19:27, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1738976148|0xb87ab476dcf76e72010632b5550955f5|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 152832, File modification date = 13/04/2008  19:27, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1181006215|0xcc748ea12c6effde940ee98098bf96bb|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 75264, File modification date = 13/04/2008  19:49, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1816364204|0x23c74d75e36e7158768dd63d92789a91|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 11264, File modification date = 13/04/2008  19:24, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266723722|0xc93c9ff7b04d772627a3646d89f7bf89|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 37248, File modification date = 13/04/2008  19:06, File description = PNP ISA Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1165810273|0x05a299ec56e52649b1cf2fc52d20f2d7|
    ImagePath="C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" <HKLM\System\ControlSet002\Services\JavaQuickStarterService>
      "c:\program files\java\jre6\bin\jqs.exe" File version = 6.0.130.3, File size = 152984, File modification date = 10/06/2009  04:53, File description = Java(TM) Quick Starter Service, Product Name = Java(TM) Platform SE 6 U13, Product version = 6.0.130.3, Company name = Sun Microsystems, Inc. (Copyright  2004) |-1065893696|0x890369aed0dde1a98f09f7dc239ca2bd|
      "c:\program files\java\jre6\lib\deploy\jqs\jqs.conf" File version = (null), File size = 43481, File modification date = 10/06/2009  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1278862412|0x04f4e9849f47161638aaaf96faf6dd98|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 24576, File modification date = 13/04/2008  19:09, File description = Keyboard Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |782406461|0x463c1ec80cd17420a542b7f36a36f128|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet002\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.2.35.0, File size = 121872, File modification date = 21/07/2008  12:34, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-795775543|0xcd6a8fa9395460ffe7fd8881a6c67254|
    ImagePath=system32\drivers\klbg.sys <HKLM\System\ControlSet002\Services\klbg>
      "c:\windows\system32\drivers\klbg.sys" File version = 8.0.8.2, File size = 33808, File modification date = 08/06/2009  12:13, File description = KLBG Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1479725553|0xf9089982ed97340984e3dd60edd75490|
    ImagePath=system32\DRIVERS\klfltdev.sys <HKLM\System\ControlSet002\Services\KLFLTDEV>
      "c:\windows\system32\drivers\klfltdev.sys" File version = 8.0.0.17, File size = 26640, File modification date = 13/03/2008  13:02, File description = KLFLTDEV Pnp device filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1257092040|0x73eb94ad1c85b4a3c5a8b4d879f668b9|
    ImagePath=system32\DRIVERS\klif.sys <HKLM\System\ControlSet002\Services\KLIF>
      "c:\windows\system32\drivers\klif.sys" File version = 8.1.0.202, File size = 226832, File modification date = 08/06/2009  12:13, File description = Klif Mini-Filter fre_wnet_x86, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1997-2009.) |1422454972|0x2627c389ba33065b2e98118ce9d71e57|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet002\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.28.0, File size = 24592, File modification date = 30/04/2008  12:06, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-1450681228|0xcd16a39c6f61c2ae0272e1f431353bf7|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 172416, File modification date = 13/04/2008  19:15, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1388878218|0x692bcf44383d056aed41b045a323d378|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\LanmanServer>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet002\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  18:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.5512, File size = 32768, File modification date = 14/04/2008  00:42, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1996-2001) |2042102201|0xd18f1f0c101d06a1c1adf26eed16fcdd|
    ImagePath=system32\drivers\monfilt.sys <HKLM\System\ControlSet002\Services\monfilt>
      "C:\WINDOWS\system32\drivers\monfilt.sys" File version = 5.10.0.4112, File size = 1389056, File modification date = 14/02/2008  09:12, File description = Creative WDM Audio Driver (32-bit), Product Name = Creative Filter Driver, Product version = 5.10.0.4112, Company name = Creative Technology Ltd. (Copyright  Creative Technology Ltd.2005) |-1670659847|0x9fa7207d1b1adead88ae8eed9cdbbaa5|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23040, File modification date = 14/04/2008  00:51, File description = Mouse Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |124825198|0x35c9e97194c8cfb8430125f8dbc34d04|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 180608, File modification date = 13/04/2008  19:02, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1926798455|0x11d42bb6206f33fbb3ba0288d3ef81bd|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), File size = 455296, File modification date = 24/10/2008  11:21, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5700, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |497968789|0x60ae98742484e7ab80c3c1450e708148|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.700, File size = 6144, File modification date = 14/04/2008  00:42, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |1236211169|0xa137f1470499a205abbb9aafb3b6f2b1|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 7552, File modification date = 13/04/2008  19:09, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-778863445|0xd1575e71568f4d9e14ca56b7b0453bf1|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 5376, File modification date = 13/04/2008  19:09, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-455576418|0x325bb26842fc7ccc1fcce2c457317f3e|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 4992, File modification date = 13/04/2008  19:09, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |125631378|0xbad59648ba099da4a17680b39730cb3d|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 15488, File modification date = 14/04/2008  00:51, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1712875245|0xaf5f4f3f14a8ea2c26de30f7a1e17136|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\napagent>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 10112, File modification date = 13/04/2008  19:27, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1736141924|0x1ab3d00c991ab086e69db84b6c0ed78f|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 14592, File modification date = 14/04/2008  00:51, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638052838|0xf927a4434c5028758a842943ef1a3849|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 91520, File modification date = 13/04/2008  19:50, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1543079136|0xedc1531a49c80614b2cfda43ca8659ab|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34688, File modification date = 13/04/2008  19:26, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |105459613|0x5d81cf9a2f1a3a756b66cf684911cdf0|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 162816, File modification date = 13/04/2008  19:51, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716076670|0x74b2b2f5bea5e9a3dc021d685551bd3d|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:42, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 111104, File modification date = 14/04/2008  00:42, File description = Network DDE - DDE Communication, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1501726773|0xb857ba82860d7ff85ae29b095645563b|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 23/08/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 23/08/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet002\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  15:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet002\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 80128, File modification date = 14/04/2008  00:51, File description = Parallel Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1231929630|0x5575faf8f97ce5e713d108c2a58d7c7c|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 68224, File modification date = 13/04/2008  19:06, File description = NT Plug and Play PCI Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450585121|0xa219903ccf74233761d92bef471a07b1|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 17/08/2001  08:51, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-294303239|0xccf5f451bb1a5a2a522a76e670000ff0|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 110592, File modification date = 06/02/2009  11:11, File description = Services and Controller app, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1829809213|0x65df52f5b8b6e9bbd183505225c37315|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 48384, File modification date = 13/04/2008  19:49, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1012407590|0xefeec01b1d3cf84f16ddd24d9d9d8f99|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet002\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 69120, File modification date = 13/04/2008  19:26, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1480040911|0x09298ec810b07e5d582cb3a3f9255424|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 23/08/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=System32\Drivers\PxHelp20.sys <HKLM\System\ControlSet002\Services\PxHelp20>
      "c:\windows\system32\drivers\pxhelp20.sys" File version = 3.00.56a, File size = 43528, File modification date = 07/03/2007  23:51, File description = Px Engine Device Driver for Windows 2000/XP, Product Name = PxHelp20, Product version = (null), Company name = Sonic Solutions (Copyright  Sonic Solutions) |-1565375476|0xd86b4a68565e444d76457f14172c875a|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 23/08/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 51328, File modification date = 13/04/2008  19:49, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1282033894|0x11b4a627bc9614b885c4969bfa5ff8a6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 41472, File modification date = 13/04/2008  19:27, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-24737908|0x5bc962f2654137c9909c3d4603587dee|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 23/08/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 175744, File modification date = 13/04/2008  19:58, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-461198168|0x7ad224ad1a1437fe28d89cf22b17780a|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 23/08/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet002\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 196224, File modification date = 13/04/2008  19:02, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1760474474|0x15cabd0f7c00c47c70124907916af3f1|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 141312, File modification date = 14/04/2008  00:42, File description = Microsoft Remote Desktop Help Session Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |283819399|0x3c37bf86641bda977c3bf8a840f3b7fa|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 57600, File modification date = 14/04/2008  00:10, File description = Redbook Audio Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1490252104|0xf828dd7e1419b6653894a8f97a0094c5|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 75264, File modification date = 14/04/2008  00:42, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2066066351|0xaaed593f84afa419bbae8572af87cf6a|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234), File size = 401408, File modification date = 09/02/2009  12:10, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5755, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2025577663|0x6b27a5c03dfb94b4245739065431322c|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 23/08/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611436428|0x471b3f9741d762abe75e9deea4787e47|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 13312, File modification date = 14/04/2008  00:42, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-429297674|0xbf2466b3e18e970d8a976fb95fc1ca85|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 95744, File modification date = 14/04/2008  00:42, File description = Smart Card Resource Management Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |584144454|0x86d007e7a654b9a71d1d7d856b104353|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = 4.03.086, File size = 20480, File modification date = 13/04/2008  17:09, File description = Macrovision SECURITY Driver, Product Name = Macrovision SECURITY Driver, Product version = SECURITY Driver 4.03.086 2006/09/13, Company name = Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. ( 2006 Macrovision Corporation ) |996139603|0x90a3935d05b494a5a39d37e71f09a677|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet002\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 15744, File modification date = 13/04/2008  19:10, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885921804|0x0f29512ccd6bead730039fb4bd2c85ce|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet002\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 64512, File modification date = 13/04/2008  19:45, File description = Serial Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1099258748|0xcca207a8896d4c6a0c9ce29a4ae411a7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\snapman.sys <HKLM\System\ControlSet002\Services\snapman>
      "c:\windows\system32\drivers\snapman.sys" File version = 3.0 build 303, File size = 114048, File modification date = 26/06/2009  09:01, File description = Acronis Snapshot API, Product Name = Acronis Snapshot API, Product version = 3.0 build 303, Company name = Acronis (Copyright (c) Acronis 2000-2006) |503486824|0xe78c98378a071ce4d48a7c514fa98fa1|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 6272, File modification date = 13/04/2008  19:15, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1300287757|0xab8b92451ecb048a4d1de7c3ffcb4a9f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 57856, File modification date = 14/04/2008  00:42, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |839599183|0xd8e14a61acc1d4a6cd0d38aebac7fa3b|
    ImagePath=\SystemRoot\system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "C:\WINDOWS\system32\drivers\sr.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 73472, File modification date = 13/04/2008  19:06, File description = System Restore Filesystem Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2016555869|0x76bb022c2fb6902fd5bdd4f78fc13a5d|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), File size = 333952, File modification date = 11/12/2008  10:57, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5725, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1261269261|0x3bb03f2ba89d2be417206c373d2af17c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 4352, File modification date = 14/04/2008  00:51, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-192017914|0x3941d127aef12e93addf6fe6ee027e0f|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 56576, File modification date = 13/04/2008  19:15, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546562907|0x8ce882bcc6cf8a62f2b2323d95cb3d01|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 60800, File modification date = 13/04/2008  19:45, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1518875713|0x8b83f3ed0f1688b4958f77cd6d2bf290|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 89600, File modification date = 14/04/2008  00:42, File description = Performance Logs and Alerts Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |862147980|0xc7abbc59b43274b1109df6b24d617051|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 361600, File modification date = 16/09/2009  12:26, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1831242800|0xcbeebeb899e31ef52b962cb31fc8ca5c|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 40840, File modification date = 14/04/2008  00:43, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347787444|0x88155247177638048422893737429d9e|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\tifsfilt.sys <HKLM\System\ControlSet002\Services\tifsfilter>
      "c:\windows\system32\drivers\tifsfilt.sys" File version = 3.3 build 443, File size = 39264, File modification date = 26/06/2009  09:01, File description = Acronis True Image File System Filter, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |-35241593|0xd352fff2a623b916c08ceacbfc8b5c32|
    ImagePath=system32\DRIVERS\timntr.sys <HKLM\System\ControlSet002\Services\timounter>
      "c:\windows\system32\drivers\timntr.sys" File version = 3.3 build 443, File size = 395744, File modification date = 26/06/2009  09:01, File description = Acronis True Image Backup Archive Explorer, Product Name = Acronis True Image, Product version = 3.3 build 443, Company name = Acronis (Copyright (c) Acronis 2000-2006) |1366719406|0x64694b2a5c772e1c61feac300ed90ca6|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet002\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 73216, File modification date = 14/04/2008  00:42, File description = Telnet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1059603438|0xdb7205804759ff62c34e3efd8a4cc76a|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 384768, File modification date = 13/04/2008  19:09, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1929168820|0x402ddc88356b1bac0ee3dd1580c76a31|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 18432, File modification date = 14/04/2008  00:42, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1705983588|0x05365fb38fca1e98f7a566aaaf5d1815|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 30208, File modification date = 13/04/2008  19:15, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1857037573|0x65dcf09d0e37d4c6b11b5b0b76d470a7|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 59520, File modification date = 13/04/2008  19:15, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1405072005|0x1ab3cdde553b6e064d2e754efe20285c|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 15104, File modification date = 13/04/2008  19:15, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1854082828|0xa0b8cf9deb1184fbdd20784a58fa75d4|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "C:\WINDOWS\system32\drivers\usbstor.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 26368, File modification date = 13/04/2008  19:15, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1466830968|0xa32426d9b14a089eaa1d922e0c5801a9|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet002\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20608, File modification date = 13/04/2008  19:15, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2111307536|0x26496f9dee2d787fc3e61ad54821ffe6|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 20992, File modification date = 13/04/2008  19:14, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |413764501|0x0d3a8fafceacd8b7625cd549757a7df1|
    ImagePath=system32\drivers\viahduaa.sys <HKLM\System\ControlSet002\Services\VIAHdAudAddService>
      "c:\windows\system32\drivers\viahduaa.sys" File version = 6,0,01,1520 built by: WinDDK, File size = 874880, File modification date = 16/09/2008  15:20, File description = VIA High Definition Audio Function Driver, Product Name = VIA High Definition Audio Driver, Product version = 6,0,01,1520, Company name = VIA Technologies, Inc. ( Microsoft Corporation. All rights reserved.) |596645202|0xf59b9da1fde462a662c84a0f279c0693|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 289792, File modification date = 14/04/2008  00:42, File description = Microsoft Volume Shadow Copy Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |64155087|0x7a9db3a67c333bf0bd42e42b8596854b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 34560, File modification date = 13/04/2008  19:27, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1402062402|0xe20b95baedb550f32dd489265c1da1f6|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 83072, File modification date = 13/04/2008  19:47, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1457997356|0x6768acf64b18196494413695f0c3a00f|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 126464, File modification date = 14/04/2008  00:42, File description = WMI Performance Adapter Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-18861181|0xe0673f1106e62a68d2257e376079f821|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet002\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 913408, File modification date = 18/10/2006  15:05, File description = Windows Media Player Network Sharing Service, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |121175657|0xf74e3d9a7fa9556c3bbb14d4e5e63d3b|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet002\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet002\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 15/11/2008  04:19, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet002\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 14336, File modification date = 14/04/2008  00:42, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861231672|0x27c6d03bcdb8cfeb96b716f3d8be3e18|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet001\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 588800, File modification date = 14/04/2008  00:42, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-347235898|0x23043c91a0f9dfb4b9e9f87b680863b4|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\system32\ieudinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}>
      "c:\windows\system32\ieudinit.exe" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 36864, File modification date = 07/03/2009  23:32, File description = IE Per User Active Setup Uninstall Utility, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1870729525|0x06a0d051b6937cda3e38702494bbfc2a|
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 11.0.5721.5235 (WMP_11.070626-2109), File size = 317440, File modification date = 26/06/2007  17:10, File description = Microsoft Windows Media Player Setup Utility, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5235, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1472613693|0xd0cb8deaf008d7cdc794ef6a37ec8134|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "c:\windows\system32\ie4uinit.exe" File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 173056, File modification date = 03/07/2009  11:01, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-212154573|0x9569f5f2161914b3d027d062a4095e1c|
    StubPath="C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\iedkcs32.dll" File version = 18.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 386048, File modification date = 03/07/2009  17:09, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 18.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1286060457|0xd2cfe6b3415513346496017a37764501|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\iedkcs32.dll" File version = 18.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 386048, File modification date = 03/07/2009  17:09, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 18.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1286060457|0xd2cfe6b3415513346496017a37764501|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 45056, File modification date = 14/04/2008  00:42, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-385946341|0x2b86c9eee08af3b536203f1a13b464b5|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 11776, File modification date = 14/04/2008  00:42, File description = Microsoft(C) Register Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |310448307|0xfbdb9d0935b9907b809b381fddf1627f|
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:42, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 73216, File modification date = 14/04/2008  00:42, File description = Outlook Express Setup Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |708047487|0x8058c01e0b96ec2f74ff764be1b67d7f|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 23/08/2001  12:00, File description = Windows User-interface core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1449542862|0xf002378c8416d21c4b7ed1b15398e647|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 128512, File modification date = 07/03/2009  23:32, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-715630526|0x8fed1e0a491d4990853d23f21c59c730|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 46281, File modification date = 13/04/2008  16:29, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-904713119|0xed4041a9ee05c427d25a59d82bc3712e|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser <HKLM\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 128512, File modification date = 07/03/2009  23:32, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-715630526|0x8fed1e0a491d4990853d23f21c59c730|
      "c:\windows\inf\msmsgs.inf" File version = (null), File size = 51427, File modification date = 13/04/2008  18:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1743219520|0xef5175ce56d762931c468699b935b8ed|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "c:\windows\system32\advpack.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 128512, File modification date = 07/03/2009  23:32, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-715630526|0x8fed1e0a491d4990853d23f21c59c730|
      "c:\windows\inf\wmp.inf" File version = (null), File size = 48482, File modification date = 15/11/2008  04:20, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-644522073|0x146c801edc7d030d21e9db856d8b806b|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 73216, File modification date = 14/04/2008  00:42, File description = Outlook Express Setup Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |708047487|0x8058c01e0b96ec2f74ff764be1b67d7f|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 23/08/2001  12:00, File description = Windows User-interface core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1449542862|0xf002378c8416d21c4b7ed1b15398e647|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 11776, File modification date = 14/04/2008  00:42, File description = Microsoft(C) Register Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |310448307|0xfbdb9d0935b9907b809b381fddf1627f|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -BaseSettings <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "c:\windows\system32\ie4uinit.exe" File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 173056, File modification date = 03/07/2009  11:01, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-212154573|0x9569f5f2161914b3d027d062a4095e1c|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 23/08/2001  12:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 23/08/2001  12:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 68768, File modification date = 13/04/2008  17:24, File description = System APIs for Multimedia, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-1249710885|0xbac7ca4576ef5509f336f5b007dc195b|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 23/08/2001  12:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 23/08/2001  12:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 23/08/2001  12:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 109568, File modification date = 14/04/2008  00:42, File description = Program Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1830408332|0xb703072af60373aebc8f0ba1ea211f5e|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 23/08/2001  12:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 23/08/2001  12:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4048, File modification date = 23/08/2001  12:00, File description = Timer driver for PC compatibles, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-250810258|0x9e7425234addedabc7bf7addafd72fd9|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 18944, File modification date = 14/04/2008  00:41, File description = Microsoft MIDI Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |778919889|0x5c12660a97822f6e61576943b49aaad6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 16384, File modification date = 14/04/2008  00:39, File description = IMA ADPCM CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-177085329|0x577e496f0d41411bf149394d80959d53|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 14848, File modification date = 14/04/2008  00:40, File description = Microsoft ADPCM CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-16203509|0xc5648be5409e0aabda8c9047bac8f603|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 23/08/2001  12:00, File description = Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-431117150|0x33271a2667334b9a8842c65a079ef375|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 23/08/2001  12:00, File description = Microsoft GSM 6.10 Audio CODEC for MSACM, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2046612480|0x3a9846e207dafc13009c048a2f6f8c2a|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 23/08/2001  12:00, File description = DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50, Product Name = DSP GROUP Windows NT(TM) TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. (Copyright DSP Group, Inc. 1993-1996) |-579275559|0xe8cd0d7e169ecce2d4fd829daab786ed|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 14/04/2008  00:41, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1151350447|0x7e86d471ef8ded7b9d15106002120271|
    vidc.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.5512, File size = 294912, File modification date = 14/04/2008  00:42, File description = Microsoft H.263 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |-2876714|0x7d529aa41ea993357f8c3d7e92c2372a|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 23/08/2001  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-442479925|0x43eca1576906ba76fb3e329a338a3cae|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 23/08/2001  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-442479925|0x43eca1576906ba76fb3e329a338a3cae|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 14/04/2008  00:42, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-78186968|0x948e1498c6438625247f94534aaa82fe|
    vidc.iyuv=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 47616, File modification date = 14/04/2008  00:51, File description = Intel Indeo(R) Video YUV Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation (Copyright Intel Corporation 1992-1997) |-1502235171|0xf201b7fe27967bc6ec3fa37619646439|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.5512 (xpsp.080413-0845), File size = 11264, File modification date = 14/04/2008  00:42, File description = Microsoft RLE Compressor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1541921595|0x374140237756d58bb842657462a0df1d|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 23/08/2001  12:00, File description = Microsoft Video 1 Compressor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-329319647|0x6ef2b7676e92b9452aab164339b69084|
    vidc.uyvy=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:51, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    vidc.yuy2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:51, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    vidc.yvu9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 23/08/2001  12:00, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-438656468|0x1a235b74c54f236b7667ab67e8ae3820|
    vidc.yvyu=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.5512 (xpsp.080413-2108), File size = 16896, File modification date = 14/04/2008  00:51, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2051830565|0xce638eff365da822a9c70654a40861c7|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20480, File modification date = 23/08/2001  12:00, File description = Microsoft Sound Mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-717198418|0x9a3bd5f55aadff859539142f6328a66e|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 23/08/2001  12:00, File description = Microsoft G.723.1 CODEC for MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |866580183|0xb87f759738c52e8d6fbcdaaa84c6486f|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.5512, File size = 294912, File modification date = 14/04/2008  00:42, File description = Microsoft H.263 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |-2876714|0x7d529aa41ea993357f8c3d7e92c2372a|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.5512, File size = 188416, File modification date = 14/04/2008  00:42, File description = Microsoft H.261 ICM Driver, Product Name = Windows NetMeeting, Product version = 3.01, Company name = Microsoft Corporation (Copyright  Intel Corp. and Microsoft Corporation 1995-1999) |563769225|0xc6fd300a6100ac89bc4cb944c19fa2a9|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 14/04/2008  00:40, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |-1889729102|0xcb9c24e95606a65397d1a00928ba9b77|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 14/04/2008  00:40, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |2086205860|0x0dbb250a89e2e1c9281009ac269f0805|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 14/04/2008  00:42, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-1262740183|0x877c90686858d899b042bba45e9b7f2c|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 14/04/2008  00:41, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1209309798|0x5f10dc19d92ccf6b719b494572f4f74b|
    msacm.l3acm=C:\WINDOWS\system32\l3codeca.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codeca.acm" File version = 1, 9, 0, 0305, File size = 290816, File modification date = 14/04/2008  00:39, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |-530221970|0x452705ac9e4c0dde91a61f0e02292423|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
    aux=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 23552, File modification date = 14/04/2008  00:42, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-289860406|0x680b56a8b62d1bcf4a0b2aaad03d88e4|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows
    AppInit_DLLs=C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\mzvkbd3.dll" File version = 8.0.0.522, File size = 109072, File modification date = 25/08/2009  11:37, File description = Mozilla 3 Virtual Keyboard, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.522, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |1980304701|0xf92cbaae4c10e367df071a7c2b95db4a|
      "c:\program files\kaspersky lab\kaspersky internet security 2009\adialhk.dll" File version = 8.0.0.506, File size = 83208, File modification date = 11/11/2008  14:59, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |2057936246|0x2c80801d74477298ff2199f2593589bd|
      "c:\program files\kaspersky lab\kaspersky internet security 2009\kloehk.dll" File version = 8.0.0.506, File size = 11016, File modification date = 11/11/2008  15:00, File description = Kaspersky OE plugin loader, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-491454298|0xefd7de0e529c9ac6bc983d278b23e9d6|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    WPDShServiceObj={AAA288BA-9A4C-45B0-95D7-94D524869DB5} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\wpdshserviceobj.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 15/11/2008  04:19, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\stobject.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 121856, File modification date = 14/04/2008  00:42, File description = Systray shell service object, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-505515755|0x50512fc9b7878e3c2c147bc17326a7db|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:42, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:42, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:42, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
    SCRNSAVE.EXE=C:\WINDOWS\system32\ssmypics.scr <HKEY_USERS\S-1-5-21-515967899-602609370-682003330-1003\Control Panel\Desktop>
      "c:\windows\system32\ssmypics.scr" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 47104, File modification date = 14/04/2008  00:42, File description = My Pictures Slideshow Screensaver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1622473940|0x5e453cb99df0838226defc05f3484cdf|
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 220672, File modification date = 14/04/2008  00:42, File description = Logon Screen Saver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224866291|0x9fad7dff67555ff1e06bc4a3893024a7|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), File size = 8461312, File modification date = 17/06/2008  19:02, File description = Windows Shell Common Dll, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |572649402|0x08b99916c98e15f6c28d24d73e53b45a|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 618496, File modification date = 14/04/2008  00:42, File description = Control Panel Drivers Applet, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611903034|0x0f93f0a941dc94b83be820f51174695d|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 23/08/2001  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39936, File modification date = 14/04/2008  00:42, File description = Security Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1786151644|0xf99b7c7118733f1cd1713fc6a5473c1d|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 23/08/2001  12:00, File description = OLE DocFile Property Page, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2085292712|0x3d4f2a08c0d060b62894c1d1a25b5125|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:42, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
    {41E300E0-78B6-11ce-849B-444553540000}
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 385536, File modification date = 14/04/2008  00:42, File description = Windows Theme API, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1215048606|0xa314eea2a503a8e04085201e436384a5|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16384, File modification date = 23/08/2001  12:00, File description = Advanced display adapter properties, Product Name = Microsoft Windows Operating System, Product version = 6.00.2600.0000, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-696121066|0x188b7b757549d7fff3a398fe5b96ab57|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 23/08/2001  12:00, File description = Advanced display monitor properties, Product Name = Microsoft Windows Operating System, Product version = 6.00.2600.0000, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2072485570|0x74e6c29348cf7f474ae6dbe4421fe624|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 51200, File modification date = 14/04/2008  00:41, File description = Directory Service Security UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1008566686|0x843176bf01f4208675d6c71ce7b13325|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 25088, File modification date = 14/04/2008  00:42, File description = Compatibility Tab Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |500308471|0xca59c3256b6f4f2decb9890f304da473|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 27648, File modification date = 14/04/2008  00:42, File description = Shell scrap object handler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1287773517|0xbb6df8ec2f2aaf61de7cf7e721af963a|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1504256, File modification date = 14/04/2008  00:41, File description = Windows DiskCopy, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |596725467|0xd62e7a444ffba599a49c0bf93fb004f1|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14336, File modification date = 23/08/2001  12:00, File description = Network object shell UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1584020191|0x00cf98b20e2dc88500b72c47226b8c59|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 23/08/2001  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 23/08/2001  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 560640, File modification date = 14/04/2008  00:42, File description = Print UI DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1241821517|0xb2cf9f1f606dec23f70a40b01df3c396|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 155648, File modification date = 14/04/2008  00:41, File description = Windows Shell Disk Quota UI DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-217597258|0xdd4906169d7f99f582276fc4d478c986|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 191488, File modification date = 14/04/2008  00:42, File description = Windows Briefcase, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-412451629|0xa60fc9ca376dba1235c63e960996f013|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 23/08/2001  12:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |369345011|0xf759a6e14403bc3d7a55ccad1b8f7b4a|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 382976, File modification date = 14/04/2008  00:41, File description = Windows Font Folder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1496405538|0xe518b7e8b372ee8dc9868946faa8c4c4|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 23/08/2001  12:00, File description = Microsoft Color Matching System User Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1682530595|0x079c0bb1ca25aca85e1e12c331e6c8aa|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 39936, File modification date = 14/04/2008  00:42, File description = Security Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1786151644|0xf99b7c7118733f1cd1713fc6a5473c1d|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 143360, File modification date = 14/04/2008  00:42, File description = Shell extensions for sharing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1585496229|0xa70a2d85ad143d6bb823c246ceb699a5|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 23/08/2001  12:00, File description = Advanced display performance properties, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1114691037|0x2591cd8d4654ae3c7d5b83d582fb6c2b|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.2.3790.4136 (srv03_sp2_qfe.070821-1204), File size = 61440, File modification date = 14/04/2008  00:41, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.4136, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |5781428|0x1c22a3866112ed41e1f3684dae9ad5d2|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 53760, File modification date = 14/04/2008  00:41, File description = Crypto Shell Extensions, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1270500552|0x95c9810ee06a6302c7330b295cfe4ba5|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.5512 (xpsp.080413-2113), File size = 53760, File modification date = 14/04/2008  00:41, File description = Crypto Shell Extensions, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1270500552|0x95c9810ee06a6302c7330b295cfe4ba5|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:42, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 1703936, File modification date = 14/04/2008  00:42, File description = Network Connections Shell, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-563111188|0x062f837c1fbdb6a0a75f82efc2ee8e74|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:42, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:42, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:42, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:42, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 589312, File modification date = 14/04/2008  00:42, File description = Imaging Devices Shell Folder UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1090530434|0xbf67ac2c1f41be892b98e9b8e91c0cb8|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.5512 (xpsp.080413-2111), File size = 60416, File modification date = 14/04/2008  00:42, File description = Remote Sessions CPL Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1710249258|0xb30637e52cb169f89335119978bdbd3e|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.7.0.18066, File size = 90112, File modification date = 09/05/2008  10:53, File description = Microsoft (R) Shell Extension for Windows Script Host, Product Name = Microsoft (R) Windows Script Host, Product version = 5.7.0.18066, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-1978924968|0x3a6d465f379e5c815f4ad565391e654c|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1132.0 (xpsp.080413-0852), File size = 487424, File modification date = 14/04/2008  00:42, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1132.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |917279009|0xdc095db6d468cb5b653e05f865487e57|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:42, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:42, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 274944, File modification date = 14/04/2008  00:42, File description = Task Scheduler interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223549623|0x4044e880593fe1ac9942190fce414be7|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), File size = 213528, File modification date = 16/10/2008  09:12, File description = Automatic Updates Control Panel, Product Name = Microsoft Windows Operating System, Product version = 7.2.6001.788, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-284053334|0x55e6c9bc8aa0481fc2fcfcfe199ea0cd|
    {35786D3C-B075-49b9-88DD-029876E11C01}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 15/11/2008  04:19, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 15/11/2008  04:19, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.5512 (xpsp.080413-2105), File size = 57856, File modification date = 14/04/2008  00:42, File description = Previous Versions property page, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1375188643|0x4763ce0b8cf4ca355db2fe6c74675db8|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.5512 (xpsp.080413-2105), File size = 57856, File modification date = 14/04/2008  00:42, File description = Previous Versions property page, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1375188643|0x4763ce0b8cf4ca355db2fe6c74675db8|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 152064, File modification date = 14/04/2008  00:42, File description = Media File Property Extractor Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853732444|0x29b6a85a733abe65b371023f790b2599|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {3028902F-6374-48b2-8DC6-9725E775B926}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {07798131-AF23-11d1-9111-00A0C98BA67D}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {7376D660-C583-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {EFA24E62-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 54784, File modification date = 14/04/2008  00:42, File description = Send Mail, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |628653444|0x94b26802af755849ab0c4359235e881d|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 54784, File modification date = 14/04/2008  00:42, File description = Send Mail, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |628653444|0x94b26802af755849ab0c4359235e881d|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "c:\windows\system32\occache.dll" File version = 8.00.6001.18806 (longhorn_ie8_gdr.090701-1700), File size = 206848, File modification date = 03/07/2009  17:09, File description = Object Control Viewer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18806, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1459331981|0x504d2c8277b9a9beeca779460d5e647d|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "c:\windows\system32\webcheck.dll" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 236544, File modification date = 07/03/2009  23:34, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1516909551|0xcc8915db4e33e8fb29ca0d2dbf75306e|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:42, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:42, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 549888, File modification date = 14/04/2008  00:42, File description = Shell Application Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |555571860|0x7e43e181abdc1f304251b597da600d10|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 33280, File modification date = 14/04/2008  00:42, File description = Run a DLL as an App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824587295|0x037b1e7798960e0420003d05bb577ee6|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 438272, File modification date = 14/04/2008  00:42, File description = Windows Picture and Fax Viewer, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1403574464|0xcc16718e92e558f22048d5c046d4de6b|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:42, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:42, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:42, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 875008, File modification date = 14/04/2008  00:42, File description = Map Network Drives/Network Places Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1026692779|0x54be97c55070b7856b54c0d86ff253e5|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:42, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:42, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 338432, File modification date = 14/04/2008  00:42, File description = Compressed (zipped) Folders, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-534939596|0xc444b433a340c24b51a2dace9d13fc70|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "C:\WINDOWS\system32\extmgr.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 55808, File modification date = 14/04/2008  00:41, File description = Extensions Manager, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1119664315|0x0683f328211a1174aa2c193378843142|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 248832, File modification date = 14/04/2008  00:42, File description = Microsoft Internet Explorer FTP Folder Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-886537954|0x1b91d3900a53801716075c5eec568c4b|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 48128, File modification date = 14/04/2008  00:41, File description = Microsoft DocProp Shell Ext, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |789729106|0x72dd38c9f051575bd767822e92c8f468|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:41, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:41, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:41, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 239104, File modification date = 14/04/2008  00:41, File description = Directory Service Find, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1802805653|0xa416b20935c4bc3f0f1208d200b8af88|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 113152, File modification date = 14/04/2008  00:41, File description = Directory Service Common UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-304627909|0x72b4aaefc66764893faeeee5614ec30e|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 113152, File modification date = 14/04/2008  00:41, File description = Directory Service Common UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-304627909|0x72b4aaefc66764893faeeee5614ec30e|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:42, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:42, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 90624, File modification date = 14/04/2008  00:42, File description = My Documents Folder UI, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155587114|0x538a270f35a713c360b7ed4168bb7521|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:41, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:41, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 326656, File modification date = 14/04/2008  00:41, File description = Client Side Caching UI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1428012766|0x085ed2e391a871c7bae87e0228b546ba|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3427, File size = 24064, File modification date = 14/04/2008  00:41, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3427, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1178968343|0x909db998f06e949c59558f1d420a169b|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.5512 (xpsp.080413-2108), File size = 28672, File modification date = 14/04/2008  00:41, File description = Distributed File System shell extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1336285211|0xe305d407e888f5859ab9b3df3a342838|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 176128, File modification date = 14/04/2008  00:42, File description = Photo Printing Wizard, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1173339654|0x5a0bcbf2a6a14396e800ff0a57ae5968|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 84480, File modification date = 14/04/2008  00:41, File description = Cabinet File Viewer Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1395650835|0xc9b409695490c5f427218595fff9b44f|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 32768, File modification date = 14/04/2008  00:42, File description = Find People, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1597675581|0x3bf5d6639c726b4baa9dbb3fa130b2c3|
    {640167b4-59b0-47a6-b335-a6b3c0695aea}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 276992, File modification date = 15/11/2008  04:19, File description = Portable Media Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation. All rights reserved.) |-656474916|0x4c48f1b30a82583caee0da02dd7259ee|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 15/11/2008  04:20, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 15/11/2008  04:20, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 15/11/2008  04:20, File description = Windows Media Player Launcher, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1936008132|0xec4857574f466cb8e8d7af92d7830a56|
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
      "c:\program files\common files\microsoft shared\web folders\msonsext.dll" File version = 11.0.6715.60, File size = 1293008, File modification date = 20/09/2005  07:33, File description = Microsoft Web Folders, Product Name = SharePoint Portal Server, Product version = 11.0.6715.60, Company name = Microsoft Corporation (Copyright (c) 2001-2003 Microsoft Corporation.  All rights reserved.) |641387587|0x32e82a0c6d4272407dc8547354efa42b|
    {42042206-2D85-11D3-8CFF-005004838597}
      "c:\program files\microsoft office\office11\msohev.dll" File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  01:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
    {07C45BB1-4A8C-4642-A1F5-237E7215FF66}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {11016101-E366-4D22-BC06-4ADA335C892B}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {1C1EDB47-CE22-4bbb-B608-77B48F83C823}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {205D7A97-F16D-4691-86EF-F3075DCCA57D}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {25336920-03f9-11cf-8fd0-00aa00686f13}
      "c:\windows\system32\mshtml.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 5937152, File modification date = 19/07/2009  13:18, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1221307042|0x5a32b43a48d6dca339bf24105d9a028f|
      "c:\windows\system32\version.dll" File version = 5.1.2600.5512 (xpsp.080413-2105), File size = 18944, File modification date = 14/04/2008  00:42, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1435180463|0xc7ce131408739b0b3a318be2d0032719|
      "c:\windows\system32\mshtml.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 5937152, File modification date = 19/07/2009  13:18, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1221307042|0x5a32b43a48d6dca339bf24105d9a028f|
    {3050f3d9-98b5-11cf-bb82-00aa00bdce0b}
      "c:\windows\system32\mshtml.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 5937152, File modification date = 19/07/2009  13:18, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1221307042|0x5a32b43a48d6dca339bf24105d9a028f|
    {43886CD5-6529-41c4-A707-7B3C92C05E68}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {44C76ECD-F7FA-411c-9929-1B77BA77F524}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {4B78D326-D922-44f9-AF2A-07805C2A3560}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {6038EF75-ABFC-4e59-AB6F-12D397F6568D}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {6CF48EF8-44CD-45d2-8832-A16EA016311B}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {73CFD649-CD48-4fd8-A272-2070EA56526B}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {8856f961-340a-11d0-a96b-00c04fd705a2}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {9D958C62-3954-4b44-8FAB-C4670C1DB4C2}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {B31C5FAE-961F-415b-BAF0-E697A5178B94}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {E6EE9AAC-F76B-4947-8260-A9F136138E11}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {F2CF5485-4E02-4f68-819C-B92DE9277049}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {FDE7673D-2E19-4145-8376-BBD58C4BC7BA}
      "c:\windows\system32\ieframe.dll" File version = 8.00.6001.18812 (longhorn_ie8_gdr.090717-2100), File size = 11067392, File modification date = 19/07/2009  13:48, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18812, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1878640323|0x964fe5abad6d9a1e38797219514db5b2|
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}
      "c:\program files\winrar\rarext.dll" File version = (null), File size = 129024, File modification date = 20/09/2007  22:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1868473675|0x814f6668a575747256611255d2199edb|
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.506, File size = 222472, File modification date = 11/11/2008  15:00, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-493283193|0x38312cd975894387b9dde7af96b3f477|
    {C539A15A-3AF9-4c92-B771-50CB78F5C751}
      "c:\program files\acronis\trueimagehome\tishell.dll" File version = 10,0,0,4871, File size = 502768, File modification date = 16/10/2006  17:07, File description = Acronis True Image Shell Extensions, Product Name = Acronis True Image, Product version = 10,0,0,4871, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |957930816|0xb0a717f9861e0288672a882aae8d7863|
    {C539A15B-3AF9-4c92-B771-50CB78F5C751}
      "c:\program files\acronis\trueimagehome\tishell.dll" File version = 10,0,0,4871, File size = 502768, File modification date = 16/10/2006  17:07, File description = Acronis True Image Shell Extensions, Product Name = Acronis True Image, Product version = 10,0,0,4871, Company name = Acronis (Copyright (C) Acronis, 2000-2006.) |957930816|0xb0a717f9861e0288672a882aae8d7863|
  HKLM\Software\Microsoft\Internet Explorer\Toolbar
    {E0E899AB-F487-11D5-8D29-0050BA6940E3}
      "c:\program files\flashget\fgiebar.dll" File version = 1, 2, 0, 0, File size = 86016, File modification date = 26/05/2002  22:17, File description = FlashGet IE Bar, Product Name = fgiebar Module, Product version = 1, 2, 0, 0, Company name = Amaze Soft (Copyright 2001 by Amaze Soft) |-1348807550|0x94d01cba4fbb4eb408f02f549ca5d815|
  *\Software\Microsoft\Internet Explorer\MenuExt\*
    DEFAULT=res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 <HKEY_USERS\S-1-5-21-515967899-602609370-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\&  Microsoft Excel>
      "c:\program files\microsoft office\office11\excel.exe" File version = 11.0.8169, File size = 10352472, File modification date = 31/05/2007  08:41, File description = Microsoft Office Excel, Product Name = Microsoft Office 2003, Product version = 11.0.8169, Company name = Microsoft Corporation (Copyright  1985-2003 Microsoft Corporation.  All rights reserved.) |-938677709|0x49a38000d31452a9faf0d8d1774634f6|
    DEFAULT=C:\Program Files\FlashGet\jc_all.htm <HKEY_USERS\S-1-5-21-515967899-602609370-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\    FlashGet>
      "c:\program files\flashget\jc_all.htm" File version = (null), File size = 575, File modification date = 06/02/2000  06:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-216221293|0x4f5140beadb0a78ce30e9f0f4b591b8f|
    DEFAULT=C:\Program Files\FlashGet\jc_link.htm <HKEY_USERS\S-1-5-21-515967899-602609370-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\   FlashGet>
      "c:\program files\flashget\jc_link.htm" File version = (null), File size = 1898, File modification date = 06/02/2000  06:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1527881127|0x208f30c68e12274b625e3edf9186680c|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 23/08/2001  12:00, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857171960|0x43c797488aed00ae5170b0531f8fc6e9|
  *\SOFTWARE\Microsoft\Internet Explorer\Extensions\*
    HotIcon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll,101 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.506, File size = 222472, File modification date = 11/11/2008  15:00, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-493283193|0x38312cd975894387b9dde7af96b3f477|
    Icon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll,102 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.506, File size = 222472, File modification date = 11/11/2008  15:00, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-493283193|0x38312cd975894387b9dde7af96b3f477|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    BandCLSID={85E0B171-04FA-11D1-B7DA-00A0C90348D6} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll" File version = 8.0.0.506, File size = 222472, File modification date = 11/11/2008  15:00, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 8.0.0.506, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-493283193|0x38312cd975894387b9dde7af96b3f477|
    BandCLSID={FF059E31-CC5A-4E2E-BF3B-96E929D65503} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refiebar.dll" File version = 11.0.8164, File size = 63840, File modification date = 19/04/2007  09:10, File description = Allows you to use the Research Library and its collection of information services from Microsoft Internet Explorer, Product Name = Research Library Explorer Bar, Product version = 11.0.8164, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |-387047169|0x22bdc1e6e606c9bae68141d7099309ab|
    Icon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBAR.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbar.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  14:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    HotIcon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbarh.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  14:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    Exec=C:\PROGRA~1\FlashGet\flashget.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}>
      "c:\program files\flashget\flashget.exe" File version = 1, 6, 0, 0, File size = 1302528, File modification date = 01/04/2004  07:26, File description = FlashGet, Product Name = FlashGet, Product version = 1, 6, 0, 0, Company name = Amaze Soft (Copyright (C) 1999-2004 by Amaze Soft) |570200072|0x9403e81f0fb4855cf7f1e4e37b74db38|
    HotIcon=C:\PROGRA~1\FlashGet\flashget.exe,128 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}>
      "c:\program files\flashget\flashget.exe" File version = 1, 6, 0, 0, File size = 1302528, File modification date = 01/04/2004  07:26, File description = FlashGet, Product Name = FlashGet, Product version = 1, 6, 0, 0, Company name = Amaze Soft (Copyright (C) 1999-2004 by Amaze Soft) |570200072|0x9403e81f0fb4855cf7f1e4e37b74db38|
    Icon=C:\PROGRA~1\FlashGet\flashget.exe,223 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}>
      "c:\program files\flashget\flashget.exe" File version = 1, 6, 0, 0, File size = 1302528, File modification date = 01/04/2004  07:26, File description = FlashGet, Product Name = FlashGet, Product version = 1, 6, 0, 0, Company name = Amaze Soft (Copyright (C) 1999-2004 by Amaze Soft) |570200072|0x9403e81f0fb4855cf7f1e4e37b74db38|
    CLSID={1FBA04EE-3024-11d2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    CLSID={1FBA04EE-3024-11d2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    Exec=%windir%\Network Diagnostic\xpnetdiag.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "C:\WINDOWS\network diagnostic\xpnetdiag.exe" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 558080, File modification date = 13/04/2008  19:23, File description = Network Diagnostic for Windows XP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |292034847|0xaac1d4ee39df138c5d30ac5883e3b59f|
    CLSID={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1499136, File modification date = 14/04/2008  00:42, File description = Shell Doc Object and Control Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112114770|0x26cb10fa893f940ab09713ff46dcdade|
    Exec=C:\Program Files\Messenger\msmsgs.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:42, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
    HotIcon=C:\Program Files\Messenger\msmsgs.exe,302 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:42, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
    Icon=C:\Program Files\Messenger\msmsgs.exe,301 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1695232, File modification date = 14/04/2008  00:42, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |1858335506|0x3e930c641079443d4de036167a69caa2|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.5512 (xpsp.080413-2105), File size = 1025024, File modification date = 14/04/2008  00:41, File description = Shell Browser UI Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1858765377|0xe392e172687be172f8600c5f41ab03d9|
TASK MANAGER
   "c:\windows\system32\msfeedssync.exe" File version = 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339), File size = 13312, File modification date = 07/03/2009  23:31, File description = Microsoft Feeds Synchronization, Product Name = Windows Internet Explorer, Product version = 8.00.6001.18702, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-88714376|0xfee2ba1ad38f457f418e82ea30724053|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:42, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:42, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:42, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.5512 (xpsp.080413-0852), File size = 92672, File modification date = 14/04/2008  00:42, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1938458694|0x72451fd61ddbb0a1fb071b7c3cde5594|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:42, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.5512 (xpsp.080413-2113), File size = 16896, File modification date = 14/04/2008  00:42, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5512, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1489039494|0xd72b9ec3337b247a666f098f3d6b43de|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), File size = 245248, File modification date = 20/06/2008  17:46, File description = Microsoft Windows Sockets 2.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.5625, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-71694296|0x832e4dd8964ab7acc880b2837cb1ed20|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      127.0.0.1       localhost
      127.0.0.1       mpa.one.microsoft.com
      127.0.0.1       genuine.microsoft.com
      127.0.0.1       sls.microsoft.com
      192.168.0.1  user01
      192.168.0.2  user02
      192.168.0.3  user03
STARTUP MENU
  C:\Documents and Settings\All Users\Start Menu\Programs\Startup
      "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 08/06/2009  08:12, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup
      "C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 08/06/2009  08:12, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\Documents and Settings\Natalya\Start Menu\Programs\Startup
      "C:\Documents and Settings\Natalya\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 08/06/2009  08:12, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup
      "C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini" File version = (null), File size = 84, File modification date = 08/06/2009  08:12, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
